AWS quicksuite medium security documentation change
Summary
Updated authentication steps for Microsoft Word extension: Added requirement for email association across Entra ID/Okta users, reordered SCIM setup instructions, and removed note about Entra ID exclusivity.
Security assessment
The change mandates email association for all users under identity providers (Entra ID/Okta), which directly impacts authentication security. Missing emails could cause authentication failures or misconfigurations. The explicit SCIM setup requirement ensures proper identity propagation, reducing risks of unauthorized access.
Diff
diff --git a/quicksuite/latest/userguide/word-extension.md b/quicksuite/latest/userguide/word-extension.md index de5c5fc69..e20a3e689 100644 --- a//quicksuite/latest/userguide/word-extension.md +++ b//quicksuite/latest/userguide/word-extension.md @@ -61 +61 @@ If you configured the authentication to connect to Amazon Quick Suite with IAM I - 2. Use Microsoft Entra ID as your identity provider. + 2. Ensure that every user under your Entra ID or Okta provider configuration has an email associated with them. @@ -63 +63 @@ If you configured the authentication to connect to Amazon Quick Suite with IAM I - 3. Ensure that every user under your Entra ID provider configuration has an email associated with them. + 3. If using Entra ID, set up SCIM identity propagation between the Microsoft Entra ID instance and IAM Identity Center. For detailed steps, see [Configure SAML and SCIM with Microsoft Entra ID and IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/azure-ad-idp.html). @@ -65 +64,0 @@ If you configured the authentication to connect to Amazon Quick Suite with IAM I - 4. Set up SCIM identity propagation between the Microsoft Entra ID instance and IAM Identity Center. For detailed steps, see [Configure SAML and SCIM with Microsoft Entra ID and IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/azure-ad-idp.html). @@ -69,5 +67,0 @@ If you configured the authentication to connect to Amazon Quick Suite with IAM I - -###### Note - -The Microsoft Word extension supports only Entra ID authentication with IAM Identity Center. -