AWS quicksuite medium security documentation change
Summary
Clarified IAM Identity Center authentication steps and identity propagation requirements
Security assessment
Mandates email association for IAM users and correct SCIM setup, directly addressing potential authentication gaps in Word integrations.
Diff
diff --git a/quicksuite/latest/userguide/word-extension.md b/quicksuite/latest/userguide/word-extension.md index e20a3e689..6a3533bf2 100644 --- a//quicksuite/latest/userguide/word-extension.md +++ b//quicksuite/latest/userguide/word-extension.md @@ -61 +61 @@ If you configured the authentication to connect to Amazon Quick Suite with IAM I - 2. Ensure that every user under your Entra ID or Okta provider configuration has an email associated with them. + 2. If you are connecting an external IAM provider to IAM Identity Center, ensure that every user under your IAM provider configuration has an email associated with them. @@ -63 +63 @@ If you configured the authentication to connect to Amazon Quick Suite with IAM I - 3. If using Entra ID, set up SCIM identity propagation between the Microsoft Entra ID instance and IAM Identity Center. For detailed steps, see [Configure SAML and SCIM with Microsoft Entra ID and IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/azure-ad-idp.html). + 3. If you are using Entra ID, set up SCIM identity propagation between the Microsoft Entra ID instance and IAM Identity Center. For detailed steps, see [Configure SAML and SCIM with Microsoft Entra ID and IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/azure-ad-idp.html).