AWS singlesignon documentation change
Summary
Grammatical updates (contractions to full forms) in MFA configuration guidance
Security assessment
No security implications; updates clarify existing MFA recommendations without altering their security intent.
Diff
diff --git a/singlesignon/latest/userguide/mfa-configure.md b/singlesignon/latest/userguide/mfa-configure.md index 808785e16..46654940a 100644 --- a//singlesignon/latest/userguide/mfa-configure.md +++ b//singlesignon/latest/userguide/mfa-configure.md @@ -13 +13 @@ The following are general MFA recommendations, depending on your IAM Identity Ce - * Don't choose the **Require Them to Provide a One-Time Password Sent by Email** option if your users must sign in to the AWS access portal to access their email. For example, your users might use Microsoft 365 in the AWS access portal to read their email. In this case, users won't be able to retrieve the verification code and would be unable to sign in to the AWS access portal. For more information, see [Configure MFA device enforcement](./how-to-configure-mfa-device-enforcement.html). + * Don't choose the **Require Them to Provide a One-Time Password Sent by Email** option if your users must sign in to the AWS access portal to access their email. For example, your users might use Microsoft 365 in the AWS access portal to read their email. In this case, users will not be able to retrieve the verification code and would be unable to sign in to the AWS access portal. For more information, see [Configure MFA device enforcement](./how-to-configure-mfa-device-enforcement.html). @@ -15 +15 @@ The following are general MFA recommendations, depending on your IAM Identity Ce - * If you're already using RADIUS MFA that you configured with AWS Directory Service, you don't need to enable MFA within IAM Identity Center. MFA in IAM Identity Center is an alternative to RADIUS MFA for Microsoft Active Directory users of IAM Identity Center. For more information, see [RADIUS MFA](./mfa-types.html#about-radius). + * If you are already using RADIUS MFA that you configured with AWS Directory Service, you do not need to enable MFA within IAM Identity Center. MFA in IAM Identity Center is an alternative to RADIUS MFA for Microsoft Active Directory users of IAM Identity Center. For more information, see [RADIUS MFA](./mfa-types.html#about-radius).