AWS singlesignon documentation change
Summary
Added API reference link and updated Issuer URL documentation with internal configuration settings link
Security assessment
The changes improve documentation clarity by adding hyperlinks but do not address security vulnerabilities or introduce new security features. The Issuer URL update provides better guidance but doesn't indicate a security fix.
Diff
diff --git a/singlesignon/latest/userguide/setuptrustedtokenissuer.md b/singlesignon/latest/userguide/setuptrustedtokenissuer.md index b385ec756..6dbc9481a 100644 --- a//singlesignon/latest/userguide/setuptrustedtokenissuer.md +++ b//singlesignon/latest/userguide/setuptrustedtokenissuer.md @@ -50 +50 @@ The application can be any AWS service that is integrated with IAM Identity Cent - 1. **Add the trusted token issuer to IAM Identity Center** – The IAM Identity Center administrator adds the trusted token issuer by using the IAM Identity Center console or APIs. This configuration requires specifying the following: + 1. **Add the trusted token issuer to IAM Identity Center** – The IAM Identity Center administrator adds the trusted token issuer by using the IAM Identity Center console or [APIs](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_Operations.html). This configuration requires specifying the following: @@ -85 +85 @@ In an organization that has multiple administrators, this task is performed by a - * For **Issuer URL** , specify the OIDC discovery URL of the external IdP that will issue tokens for trusted identity propagation. You must specify the URL of the discovery endpoint up until and without `.well-known/openid-configuration`. The administrator of the external IdP can provide this URL. + * For **Issuer URL** , specify the [OIDC discovery URL](./trusted-token-issuer-configuration-settings.html#oidc-discovery-endpoint-url) of the external IdP that will issue tokens for trusted identity propagation. You must specify the URL of the discovery endpoint up until and without `.well-known/openid-configuration`. The administrator of the external IdP can provide this URL.