AWS singlesignon documentation change
Summary
Updated section titles, link labels, and header reorganization for clarity. Changed 'Connect to a Microsoft AD directory' link text to 'Microsoft AD directory' and revised provisioning workflow descriptions.
Security assessment
Changes are structural/navigational improvements (e.g., section renaming, link label updates) without addressing security vulnerabilities or introducing security-specific content. No evidence of security incident remediation.
Diff
diff --git a/singlesignon/latest/userguide/manage-your-identity-source-idp.md b/singlesignon/latest/userguide/manage-your-identity-source-idp.md index 109b448d2..355b0c905 100644 --- a//singlesignon/latest/userguide/manage-your-identity-source-idp.md +++ b//singlesignon/latest/userguide/manage-your-identity-source-idp.md @@ -7 +7 @@ Provisioning when users come from an external IdP -# Manage an external identity provider +# External identity providers @@ -13 +13 @@ For example, you can connect an external IdP such as Okta or Microsoft Entra ID, -If you are using a self-managed directory in Active Directory or an AWS Managed Microsoft AD, see [Connect to a Microsoft AD directory](./manage-your-identity-source-ad.html). +If you are using a self-managed directory in Active Directory or an AWS Managed Microsoft AD, see [Microsoft AD directory](./manage-your-identity-source-ad.html). @@ -21 +21 @@ The SAML protocol does not provide a way to query the IdP to learn about users a -When using an external IdP, you must provision all applicable users and groups into IAM Identity Center before you can make any assignments to AWS accounts or applications. To do this, you can configure [Provisioning an external identity provider into IAM Identity Center using SCIM](./provision-automatically.html) for your users and groups, or use [Manual provisioning](./provision-automatically.html#provision-manually). Regardless of how you provision users, IAM Identity Center redirects the AWS Management Console, command line interface, and application authentication to your external IdP. IAM Identity Center then grants access to those resources based on policies you create in IAM Identity Center. For more information about provisioning, see [User and group provisioning](./users-groups-provisioning.html#user-group-provision). +When using an external IdP, you must provision all applicable users and groups into IAM Identity Center before you can make any assignments to AWS accounts or applications. To do this, you can configure [Provision users and groups from an external identity provider using SCIM](./provision-automatically.html) for your users and groups, or use [Manual provisioning](./provision-automatically.html#provision-manually). Regardless of how you provision users, IAM Identity Center redirects the AWS Management Console, command line interface, and application authentication to your external IdP. IAM Identity Center then grants access to those resources based on policies you create in IAM Identity Center. For more information about provisioning, see [User and group provisioning](./users-groups-provisioning.html#user-group-provision). @@ -42 +42 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Automate sync configuration +User and group attributes in IAM Identity Center