AWS singlesignon documentation change
Summary
Restructured documentation with new setup guidance for administrators and end users, added service-linked roles section, removed password reset/MFA topics
Security assessment
The changes primarily restructure onboarding documentation and clarify roles/responsibilities. While security-related topics like MFA and password reset were removed, there's no evidence this addresses a specific vulnerability. The service-linked roles addition relates to infrastructure management rather than security controls.
Diff
diff --git a/singlesignon/latest/userguide/using-the-portal.md b/singlesignon/latest/userguide/using-the-portal.md index 6b62dd6ba..086f6e07f 100644 --- a//singlesignon/latest/userguide/using-the-portal.md +++ b//singlesignon/latest/userguide/using-the-portal.md @@ -5 +5 @@ -# Using the AWS access portal +Getting started with the AWS access portal @@ -7 +7 @@ -The AWS access portal provides users with single sign-on access to all your AWS accounts and most commonly used cloud applications such as Office 365, Concur, Salesforce, and many more. You can quickly launch multiple applications simply by choosing the AWS account or application icon in the portal. The presence of application icons in your AWS access portal means that an administrator from your company has granted you access to those AWS accounts or applications. It also means that you can access all these accounts or applications from the AWS access portal without additional sign-in prompts. +# Setting up and using the AWS access portal @@ -9 +9 @@ The AWS access portal provides users with single sign-on access to all your AWS -Contact your administrator to request additional access in the following situations: +The AWS access portal connects your workforce to AWS accounts and cloud applications through IAM Identity Center. Administrators configure the portal and manage user access, while end users sign in once to seamlessly access all their authorized resources. @@ -11 +11 @@ Contact your administrator to request additional access in the following situati - * You do not see an AWS account or application that you need to access. +The AWS access portal provides single sign-on access to: @@ -13 +13 @@ Contact your administrator to request additional access in the following situati - * The access that you have to a given account or application isn't what you expected. + * AWS accounts in your organization. @@ -14,0 +15 @@ Contact your administrator to request additional access in the following situati + * AWS managed applications such as Amazon Quick Suite and Amazon Q Developer. @@ -15,0 +17 @@ Contact your administrator to request additional access in the following situati + * Cloud applications like Office 365, Concur, Salesforce, and others. @@ -18 +19,0 @@ Contact your administrator to request additional access in the following situati -###### Topics @@ -20 +20,0 @@ Contact your administrator to request additional access in the following situati - * [Activating the AWS access portal for first-time IAM Identity Center users](./howtoactivateaccount.html) @@ -22 +22 @@ Contact your administrator to request additional access in the following situati - * [Signing in to the AWS access portal](./howtosignin.html) +When users sign in to the portal, they find the AWS accounts and applications they're authorized to access without additional sign-in. @@ -24 +24 @@ Contact your administrator to request additional access in the following situati - * [Resetting your AWS access portal user password](./resetpassword-accessportal.html) +## Getting started with the AWS access portal @@ -26 +26 @@ Contact your administrator to request additional access in the following situati - * [Getting IAM Identity Center user credentials for the AWS CLI or AWS SDKs](./howtogetcredentials.html) +**For administrators:** @@ -28 +28 @@ Contact your administrator to request additional access in the following situati - * [Creating shortcut links to AWS Management Console destinations](./createshortcutlink.html) +You need administrative access to your [organization instance](./organization-instances-identity-center.html) or [account instance](./account-instances-identity-center.html) of IAM Identity Center to configure the AWS access portal and manage user access. @@ -30 +30 @@ Contact your administrator to request additional access in the following situati - * [Registering your device for MFA](./user-device-registration.html) + 1. Optionally customize the AWS access portal URL. @@ -32 +32 @@ Contact your administrator to request additional access in the following situati - * [Viewing and ending your active session](./end-user-how-to-end-active-sessions-accessportal.html) + 2. Assign user access to AWS accounts and applications. Assigned AWS resources display in the portal. @@ -34 +34,12 @@ Contact your administrator to request additional access in the following situati - * [Customizing the AWS access portal URL](./howtochangeURL.html) + + + +**For end users:** + +Your administrator must have completed the AWS access portal setup and provided you with your portal URL and sign-in credentials. + + 1. Get your portal URL from your administrator (typically `https://your-company.awsapps.com/start`). + + 2. Sign in using the credentials provided by your administrator. + + 3. Access your resources in your portal. @@ -45 +56 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Considerations for external IdPs, the AWS CLI, and AWS SDKs +Service-linked roles @@ -47 +58 @@ Considerations for external IdPs, the AWS CLI, and AWS SDKs -Activating the AWS access portal +Configure the AWS access portal