AWS quicksuite documentation change
Summary
Updated authentication steps: added email requirement for all identity providers, added Okta support, reordered SCIM setup instructions, and removed Entra ID exclusivity note.
Security assessment
The change enhances security documentation by adding requirements for user email associations and SCIM propagation. While these improve identity management practices, there's no evidence of addressing a specific security vulnerability. The updates strengthen authentication guidance but don't fix disclosed weaknesses.
Diff
diff --git a/quicksuite/latest/userguide/outlook-extension.md b/quicksuite/latest/userguide/outlook-extension.md index dcde8949d..e3cc98ac5 100644 --- a//quicksuite/latest/userguide/outlook-extension.md +++ b//quicksuite/latest/userguide/outlook-extension.md @@ -59 +59 @@ If you configured the authentication to connect to Amazon Quick Suite with IAM I - 2. Use Microsoft Entra ID as your identity provider. + 2. Ensure that every user under your Entra ID or Okta provider configuration has an email associated with them. @@ -61 +61 @@ If you configured the authentication to connect to Amazon Quick Suite with IAM I - 3. Ensure that every user under your Entra ID provider configuration has an email associated with them. + 3. If using Entra ID, set up SCIM identity propagation between the Microsoft Entra ID instance and IAM Identity Center. For detailed steps, see [Configure SAML and SCIM with Microsoft Entra ID and IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/azure-ad-idp.html). @@ -63 +62,0 @@ If you configured the authentication to connect to Amazon Quick Suite with IAM I - 4. Set up SCIM identity propagation between the Microsoft Entra ID instance and IAM Identity Center. For detailed steps, see [Configure SAML and SCIM with Microsoft Entra ID and IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/azure-ad-idp.html). @@ -67,5 +65,0 @@ If you configured the authentication to connect to Amazon Quick Suite with IAM I - -###### Note - -The Microsoft Outlook extension supports only Entra ID authentication with IAM Identity Center. -