AWS cognito documentation change
Summary
Added documentation about automatic user group creation for IdP users
Security assessment
Explains group membership behavior for federated users but doesn't address security vulnerabilities or introduce security features
Diff
diff --git a/cognito/latest/developerguide/cognito-user-pools-identity-federation.md b/cognito/latest/developerguide/cognito-user-pools-identity-federation.md index 723e8dd0a..3f127bc35 100644 --- a//cognito/latest/developerguide/cognito-user-pools-identity-federation.md +++ b//cognito/latest/developerguide/cognito-user-pools-identity-federation.md @@ -52,0 +53,2 @@ Example: `[email protected]` + * Amazon Cognito creates a [user group](./cognito-user-pools-user-groups.html) for each OIDC, SAMl, and social IdP that you add to your user pool. The name of the group is in the format `[user pool ID]_[IdP name]`, for example `us-east-1_EXAMPLE_MYSSO` or `us-east-1_EXAMPLE_Google`. Each unique automatically-generated IdP user profile is automatically added to this group. [Linked users](./cognito-user-pools-identity-federation-consolidate-users.html) aren't automatically added to this group, but you can add their profiles to the group in a separate process. +