AWS Security ChangesHomeSearch

AWS singlesignon documentation change

Service: singlesignon · 2025-11-22 · Documentation low

File: singlesignon/latest/userguide/mfa-types.md

Summary

Replaced 'AWS Directory Service' with 'Directory Service' in multiple sections for consistency

Security assessment

Terminology updates clarify existing MFA configuration behavior but do not introduce or modify security controls. No direct security impact identified.

Diff

diff --git a/singlesignon/latest/userguide/mfa-types.md b/singlesignon/latest/userguide/mfa-types.md
index cbc6bea24..4058c00b5 100644
--- a//singlesignon/latest/userguide/mfa-types.md
+++ b//singlesignon/latest/userguide/mfa-types.md
@@ -74 +74 @@ iOS | [Authy](https://apps.apple.com/us/app/authy/id494168017), [Duo Mobile](htt
-[Remote Authentication Dial-In User Service (RADIUS)](https://en.wikipedia.org/wiki/RADIUS) is an industry-standard client-server protocol that provides authentication, authorization, and accounting management so users can connect to network services. AWS Directory Service includes a RADIUS client that connects to the RADIUS server upon which you have implemented your MFA solution. For more information, see [Enable Multi-Factor Authentication for AWS Managed Microsoft AD](https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ms_ad_mfa.html). 
+[Remote Authentication Dial-In User Service (RADIUS)](https://en.wikipedia.org/wiki/RADIUS) is an industry-standard client-server protocol that provides authentication, authorization, and accounting management so users can connect to network services. Directory Service includes a RADIUS client that connects to the RADIUS server upon which you have implemented your MFA solution. For more information, see [Enable Multi-Factor Authentication for AWS Managed Microsoft AD](https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ms_ad_mfa.html). 
@@ -78 +78 @@ You can use either RADIUS MFA or MFA in IAM Identity Center for user sign-ins to
-When you enable MFA in IAM Identity Center, your users need an MFA device to sign in to the AWS access portal. If you had previously used RADIUS MFA, enabling MFA in IAM Identity Center effectively overrides RADIUS MFA for users who sign in to the AWS access portal. However, RADIUS MFA continues to challenge users when they sign in to all other applications that work with AWS Directory Service, such as Amazon RDS for SQL Server.
+When you enable MFA in IAM Identity Center, your users need an MFA device to sign in to the AWS access portal. If you had previously used RADIUS MFA, enabling MFA in IAM Identity Center effectively overrides RADIUS MFA for users who sign in to the AWS access portal. However, RADIUS MFA continues to challenge users when they sign in to all other applications that work with Directory Service, such as Amazon RDS for SQL Server.
@@ -80 +80 @@ When you enable MFA in IAM Identity Center, your users need an MFA device to sig
-If your MFA is **Disabled** on the IAM Identity Center console and you have configured RADIUS MFA with AWS Directory Service, RADIUS MFA governs AWS access portal sign-in. This means that IAM Identity Center falls back to RADIUS MFA configuration if MFA is disabled.
+If your MFA is **Disabled** on the IAM Identity Center console and you have configured RADIUS MFA with Directory Service, RADIUS MFA governs AWS access portal sign-in. This means that IAM Identity Center falls back to RADIUS MFA configuration if MFA is disabled.