AWS singlesignon documentation change
Summary
Added temporary access context and updated access control documentation references
Security assessment
Clarifies user access management procedures without introducing new security controls or addressing vulnerabilities
Diff
diff --git a/singlesignon/latest/userguide/disableuser.md b/singlesignon/latest/userguide/disableuser.md index c8aa7982c..3fb28f362 100644 --- a//singlesignon/latest/userguide/disableuser.md +++ b//singlesignon/latest/userguide/disableuser.md @@ -7 +7 @@ -When you disable user access in your IAM Identity Center directory, you cannot edit their user details, reset their password, add the user to a group, or view their group membership. Disabling user access prevents them from signing in to the AWS access portal and they will no longer have access to their assigned AWS accounts and applications. +When you disable user access in your IAM Identity Center directory, you cannot edit their user details, reset their password, add the user to a group, or view their group membership. Disabling user access prevents them from signing in to the AWS access portal and they will no longer have access to their assigned AWS accounts and applications. Use disable user access for temporary access removal when you might need to restore access later. @@ -13 +13 @@ Use the following procedure to disable user access in your Identity Center direc -When you disable user access or delete a user in IAM Identity Center, that user will immediately be prevented from signing in to the AWS access portal and will not be able to create new sign in sessions. For more information, see [Authentication sessions](./authconcept.html#sessionsconcept). +When you disable user access or delete a user in IAM Identity Center, that user will immediately be prevented from signing in to the AWS access portal and will not be able to create new sign in sessions. For more information, see [Understanding authentication sessions in IAM Identity Center](./authconcept.html). @@ -40 +40 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Remove users from groups +Considerations for external IdPs, the AWS CLI, and AWS SDKs @@ -42 +42 @@ Remove users from groups -Edit user properties +Deny user access