AWS singlesignon documentation change
Summary
Added dual-stack options for metadata download, SAML endpoints, and SCIM provisioning in Microsoft Entra integration.
Security assessment
Expanded configuration options without security-specific context. Enhances documentation completeness but doesn't address vulnerabilities.
Diff
diff --git a/singlesignon/latest/userguide/idp-microsoft-entra.md b/singlesignon/latest/userguide/idp-microsoft-entra.md index 586ca0c98..deab69243 100644 --- a//singlesignon/latest/userguide/idp-microsoft-entra.md +++ b//singlesignon/latest/userguide/idp-microsoft-entra.md @@ -315 +315 @@ In this step, you will launch the **Change identity source** wizard from within - 4. On the **Configure external identity provider** page, under **Service provider metadata** , choose **Download metadata file** to download the XML file. + 4. On the **Configure external identity provider** page, under **Service provider metadata** , choose **Default IPv4** or **Dual-stack** , then select **Download metadata file** to download the XML file. @@ -337 +337,5 @@ This procedure establishes one-half of the SAML connection on the Microsoft side - 4. On the **Basic SAML Configuration** page, verify that both the **Identifier** and **Reply URL** values now point to endpoints in AWS that start with `https://`<REGION>`.signin.aws.amazon.com/platform/saml/`. + 4. On the **Basic SAML Configuration** page, verify that both the **Identifier** and **Reply URL** values now point to endpoints in AWS: + + * IPv4:`https://`[Region]`.signin.aws.amazon.com/platform/saml/` + + * Dual-stack:`https://sso.`[Region]`.signin.aws/platform/saml/` @@ -479 +483,5 @@ In this procedure, you will use the IAM Identity Center console to enable automa - 1. **SCIM endpoint** \- For example, https://scim.`us-east-2`.amazonaws.com/`11111111111-2222-3333-4444-555555555555`/scim/v2 + 1. **SCIM endpoint** \- For example, + + * IPv4: `https://scim.`aws-region`.amazonaws.com/`11111111111-2222-3333-4444-555555555555`/scim/v2` + + * Dual stack: `https://scim.`aws-region`.api.aws/`11111111111-2222-3333-4444-555555555555`/scim/v2`