AWS singlesignon documentation change
Summary
Updated documentation structure and content regarding SCIM attribute support in IAM Identity Center. Changed section headers to emphasize unsupported attributes, added references to SCIM specification and provisioning methods, and streamlined informational links.
Security assessment
The changes primarily improve documentation clarity about supported SCIM attributes and provisioning methods. While SCIM relates to identity management (a security domain), there's no indication of addressing a specific vulnerability or security incident. The changes focus on accuracy of supported features rather than security mitigations.
Diff
diff --git a/singlesignon/latest/userguide/manage-your-identity-source-attribute-use.md b/singlesignon/latest/userguide/manage-your-identity-source-attribute-use.md index 85800c8e1..80a33395e 100644 --- a//singlesignon/latest/userguide/manage-your-identity-source-attribute-use.md +++ b//singlesignon/latest/userguide/manage-your-identity-source-attribute-use.md @@ -5 +5 @@ -Supported user and group attributes +User objects not supportedGroup objects not supported @@ -7 +7 @@ Supported user and group attributes -# User and group attributes in IAM Identity Center +# Supported user and group attributes in IAM Identity Center @@ -9 +9 @@ Supported user and group attributes -Attributes are pieces of information that help you define and identify individual user or group objects, such as `name`, `email`, or `members`. +This guide provides a reference for SCIM attribute support in IAM Identity Center. It lists which user and group attributes from the SCIM specification are supported in the IAM Identity Center identity store, and identifies specific attributes and sub-attributes that aren't supported. @@ -11 +11 @@ Attributes are pieces of information that help you define and identify individua -## Supported user and group attributes in IAM Identity Center +Attributes are pieces of information that help you define and identify individual user or group objects, such as `name`, `email`, or `members`. IAM Identity Center supports most commonly used attributes through both manual entry and automatic SCIM provisioning. @@ -13 +13 @@ Attributes are pieces of information that help you define and identify individua -IAM Identity Center supports most commonly used attributes regardless if they are entered manually during user creation or when automatically provisioned using a synchronization engine such as defined in the System for Cross-Domain Identity Management (SCIM) specification. + * For information about the System for Cross-Domain Identity Management (SCIM) specification, see [https://tools.ietf.org/html/rfc7642](https://tools.ietf.org/html/rfc7642). @@ -15 +15 @@ IAM Identity Center supports most commonly used attributes regardless if they ar - * For more information about the System for Cross-Domain Identity Management (SCIM) specification, see [https://tools.ietf.org/html/rfc7642](https://tools.ietf.org/html/rfc7642). + * For information about manual and automatic provisioning, see [Provisioning when users come from an external IdP](./manage-your-identity-source-idp.html#provisioning-when-external-idp). @@ -17,3 +17 @@ IAM Identity Center supports most commonly used attributes regardless if they ar - * For more information about manual and automatic provisioning, see [Provisioning when users come from an external IdP](./manage-your-identity-source-idp.html#provisioning-when-external-idp). - - * For more information about attribute mapping, see [Attribute mappings between IAM Identity Center and External Identity Providers directory](./attributemappingsconcept.html). + * For information about attribute mapping, see [Attribute mappings between IAM Identity Center and External Identity Providers directory](./attributemappingsconcept.html). @@ -26 +24 @@ Because IAM Identity Center supports SCIM for automatic provisioning use cases, -### User objects +## User objects not supported @@ -52 +50 @@ All sub-attributes for users are supported, except for the following: -### Group objects +## Group objects not supported @@ -71 +69 @@ Change your identity source -Manage identities in IAM Identity Center +External identity providers