AWS quicksuite medium security documentation change
Summary
Clarified IAM Identity Center authentication steps and identity propagation requirements
Security assessment
Explicitly mandates email association for IAM users and SCIM propagation, preventing misconfiguration that could lead to unauthorized access. Addresses potential identity management gaps.
Diff
diff --git a/quicksuite/latest/userguide/outlook-extension.md b/quicksuite/latest/userguide/outlook-extension.md index e3cc98ac5..4077da504 100644 --- a//quicksuite/latest/userguide/outlook-extension.md +++ b//quicksuite/latest/userguide/outlook-extension.md @@ -59 +59 @@ If you configured the authentication to connect to Amazon Quick Suite with IAM I - 2. Ensure that every user under your Entra ID or Okta provider configuration has an email associated with them. + 2. If you are connecting an external IAM provider to IAM Identity Center, ensure that every user under your IAM provider configuration has an email associated with them. @@ -61 +61 @@ If you configured the authentication to connect to Amazon Quick Suite with IAM I - 3. If using Entra ID, set up SCIM identity propagation between the Microsoft Entra ID instance and IAM Identity Center. For detailed steps, see [Configure SAML and SCIM with Microsoft Entra ID and IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/azure-ad-idp.html). + 3. If you are using Entra ID, set up SCIM identity propagation between the Microsoft Entra ID instance and IAM Identity Center. For detailed steps, see [Configure SAML and SCIM with Microsoft Entra ID and IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/azure-ad-idp.html).