AWS singlesignon documentation change
Summary
Updated contractions to full words ('can't' to 'cannot', 'that's' to 'that is') and minor grammatical improvements
Security assessment
Changes are linguistic improvements without altering security content. The nested group limitation documentation remains unchanged in substance.
Diff
diff --git a/singlesignon/latest/userguide/idp-microsoft-entra.md b/singlesignon/latest/userguide/idp-microsoft-entra.md index ff9a86f57..fcb8eac9a 100644 --- a//singlesignon/latest/userguide/idp-microsoft-entra.md +++ b//singlesignon/latest/userguide/idp-microsoft-entra.md @@ -40 +40 @@ Nested Groups -The Microsoft Entra ID user provisioning service can't read or provision users in nested groups. Only users that are immediate members of an explicitly assigned group can be read and provisioned. Microsoft Entra ID doesn't recursively unpack the group memberships of indirectly assigned users or groups (users or groups that are members of a group that is directly assigned). For more information, see [Assignment-based scoping](https://learn.microsoft.com/en-us/azure/active-directory/app-provisioning/how-provisioning-works#assignment-based-scoping) in the Microsoft documentation. Alternatively, you can use [IAM Identity Center configurable AD sync](https://aws.amazon.com/blogs/security/managing-identity-source-transition-for-aws-iam-identity-center/) to integrate Active Directory groups with IAM Identity Center. +The Microsoft Entra ID user provisioning service cannot read or provision users in nested groups. Only users that are immediate members of an explicitly assigned group can be read and provisioned. Microsoft Entra ID doesn't recursively unpack the group memberships of indirectly assigned users or groups (users or groups that are members of a group that is directly assigned). For more information, see [Assignment-based scoping](https://learn.microsoft.com/en-us/azure/active-directory/app-provisioning/how-provisioning-works#assignment-based-scoping) in the Microsoft documentation. Alternatively, you can use [IAM Identity Center configurable AD sync](https://aws.amazon.com/blogs/security/managing-identity-source-transition-for-aws-iam-identity-center/) to integrate Active Directory groups with IAM Identity Center. @@ -135 +135 @@ Nikki Wolf is the name of your Microsoft Entra ID test user that you will create - 5. In **Password** , enter a strong password or select the eye icon to show the password that was auto-generated, and either copy or write down the value that's displayed. + 5. In **Password** , enter a strong password or select the eye icon to show the password that was auto-generated, and either copy or write down the value that is displayed. @@ -411 +411 @@ In this step, you will check to determine Nikki's level of access to manage the - 4. In the upper-right corner of the console, choose your account name, and then choose **Account**. This will take you to the **Account** page. Notice that all other sections on this page display a message that you don't have the necessary permissions to view or modify those settings. + 4. In the upper-right corner of the console, choose your account name, and then choose **Account**. This will take you to the **Account** page. Notice that all other sections on this page display a message that you do not have the necessary permissions to view or modify those settings. @@ -445 +445 @@ For testing purposes, you will create a new user (Richard Roe) in Microsoft Entr - 5. In **Password** , enter a strong password or select the eye icon to show the password that was auto-generated, and either copy or write down the value that's displayed. + 5. In **Password** , enter a strong password or select the eye icon to show the password that was auto-generated, and either copy or write down the value that is displayed.