AWS singlesignon documentation change

Service: singlesignon · 2026-01-10 · Documentation low

File: singlesignon/latest/userguide/manage-your-identity-source-ad.md

Summary

Added limitation note: IAM Identity Center cannot synchronize Foreign Security Principals (FSPs) from trusted domains

Security assessment

Documents security feature limitation for identity synchronization. Prevents unexpected access gaps but doesn't patch vulnerabilities.

Diff

diff --git a/singlesignon/latest/userguide/manage-your-identity-source-ad.md b/singlesignon/latest/userguide/manage-your-identity-source-ad.md
index 9d02a1e61..bb82cafd9 100644
--- a//singlesignon/latest/userguide/manage-your-identity-source-ad.md
+++ b//singlesignon/latest/userguide/manage-your-identity-source-ad.md
@@ -20,0 +21,2 @@ IAM Identity Center uses the connection provided by Directory Service to perform
+  * IAM Identity Center cannot synchronize Foreign Security Principals (FSPs). If a group in AWS Managed Microsoft AD contains members from a trusted domain as FSPs, those members will not sync.
+