AWS singlesignon documentation change
Summary
Updated reference from 'IAM Identity Center ID AD Sync' to 'IAM Identity Center configurable AD sync' in Microsoft Entra ID documentation
Security assessment
Change updates a documentation link to a newer blog post about identity source transitions but doesn't address security vulnerabilities or describe security features
Diff
diff --git a/singlesignon/latest/userguide/idp-microsoft-entra.md b/singlesignon/latest/userguide/idp-microsoft-entra.md index 1aad44291..ff9a86f57 100644 --- a//singlesignon/latest/userguide/idp-microsoft-entra.md +++ b//singlesignon/latest/userguide/idp-microsoft-entra.md @@ -40 +40 @@ Nested Groups -The Microsoft Entra ID user provisioning service can't read or provision users in nested groups. Only users that are immediate members of an explicitly assigned group can be read and provisioned. Microsoft Entra ID doesn't recursively unpack the group memberships of indirectly assigned users or groups (users or groups that are members of a group that is directly assigned). For more information, see [Assignment-based scoping](https://learn.microsoft.com/en-us/azure/active-directory/app-provisioning/how-provisioning-works#assignment-based-scoping) in the Microsoft documentation. Alternatively, you can use [IAM Identity Center ID AD Sync](https://aws.amazon.com/blogs/security/how-aws-sso-active-directory-sync-enhances-aws-application-experiences/) to integrate Active Directory groups with IAM Identity Center. +The Microsoft Entra ID user provisioning service can't read or provision users in nested groups. Only users that are immediate members of an explicitly assigned group can be read and provisioned. Microsoft Entra ID doesn't recursively unpack the group memberships of indirectly assigned users or groups (users or groups that are members of a group that is directly assigned). For more information, see [Assignment-based scoping](https://learn.microsoft.com/en-us/azure/active-directory/app-provisioning/how-provisioning-works#assignment-based-scoping) in the Microsoft documentation. Alternatively, you can use [IAM Identity Center configurable AD sync](https://aws.amazon.com/blogs/security/managing-identity-source-transition-for-aws-iam-identity-center/) to integrate Active Directory groups with IAM Identity Center.