AWS singlesignon documentation change
Summary
Added SID attribute mapping support for Active Directory synchronization
Security assessment
Added documentation for mapping the security identifier (SID) between IAM Identity Center and Active Directory. While SIDs are security-related identifiers, this change documents a feature enhancement rather than addressing a specific vulnerability.
Diff
diff --git a/singlesignon/latest/userguide/attributemappingsconcept.md b/singlesignon/latest/userguide/attributemappingsconcept.md index 13b8db720..900815412 100644 --- a//singlesignon/latest/userguide/attributemappingsconcept.md +++ b//singlesignon/latest/userguide/attributemappingsconcept.md @@ -58,0 +59 @@ User attribute in IAM Identity Center | Maps to this attribute in your Active D +`sid` | `${objectsid}` @@ -88,0 +90 @@ Supported attributes in your Microsoft AD directory +`${objectsid}` @@ -114,0 +117 @@ Supported attributes in IAM Identity Center for Active Directory +`${user:AD_SID}`