AWS consolemobileapp documentation change
Summary
Added detailed sign-in instructions for IAM Identity Center users including QR code scanning, URL-based login, and MFA verification. Updated federated login flow with new terminology and password manager recommendation.
Security assessment
The changes emphasize MFA verification and password manager usage, which are security best practices, but there's no evidence of addressing a specific vulnerability. The updates improve authentication documentation without referencing a patched issue.
Diff
diff --git a/consolemobileapp/latest/userguide/getting-started.md b/consolemobileapp/latest/userguide/getting-started.md index 2984c6cde..9eaa6b1ab 100644 --- a//consolemobileapp/latest/userguide/getting-started.md +++ b//consolemobileapp/latest/userguide/getting-started.md @@ -75,0 +76,43 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo +**To sign in for the first time as an IAM Identity Center user** + + 1. Sign in using a QR code: + + 1. On your desktop device, navigate to the AWS access portal. + + 2. Open the right sidepanel by choosing **More ways to access AWS**. + + 3. Use your mobile device to scan the **Access the console in the mobile app** QR code. + +###### Note + +If you use an Android device, we recommend using a third-party QR code scanner app or Google Lens to scan the **Access the console in the mobile app** QR code. + + 2. (Optional) Or sign in using a URL: + + 1. In the Console Mobile Application, select **Use a sign in URL**. + + 2. Enter your organization’s sign in URL. This directs you to your organization’s federated sign in page. + +###### Note + +If your organization uses IAM Identity Center, when an administrator creates a user in IAM Identity Center on your behalf an email invitation to join IAM Identity Center containing a one-time password and AWS access portal URL is typically sent to you. + + 3. Enter your organizational credentials (for example, a user name and password). + + 4. Choose **Sign in**. + + 5. If you are asked for a verification code, check your email for it. Then enter or paste the code in the sign-in screen. + +###### Note + +If you have a virtual MFA device or a hardware authenticator enabled for MFA, you will be prompted to enter your MFA code or use your hardware authenticator to verify your identity. + + 6. (Optional) Save your password using your password manager. We recommend doing this step. + + 7. Select an AWS account and role to assume. + + 8. View your home screen. + + + + @@ -78 +121,3 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo - 1. In the Console Mobile Application, select **Use a Federated URL**. + 1. In the Console Mobile Application, select **Use a sign in URL**. + + 2. Enter your organization’s sign in URL. This directs you to your organization’s federated sign in page. @@ -80 +125,3 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo - 2. Enter your organization’s federated URL. This directs you to your organization’s federated sign in page. +###### Note + +If your organization uses a federated or third-party identity provider like Windows Active Directory, Okta, or Salesforce Identity, contact your administrator to get your sign in URL. @@ -82 +129,3 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo - 3. Enter your federated AWS identity information. + 3. Enter your organizational credentials (for example, a user name and password). + + 4. Choose **Sign in**. @@ -84 +133 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo - 4. (Optional) Enable biometric authentication. + 5. If you are asked for a verification code, check your email for it. Then enter or paste the code in the sign-in screen. @@ -90 +139 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo - 5. Choose **Sign in**. + 6. (Optional) Save your password using your password manager. We recommend doing this step. @@ -92 +141 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo - 6. (Optional) Save your password using your password manager. + 7. Select an AWS account and role to assume. @@ -94 +143 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo - 7. View your home screen. + 8. View your home screen.