AWS Security ChangesHomeSearch

AWS singlesignon documentation change

Service: singlesignon · 2026-03-07 · Documentation low

File: singlesignon/latest/userguide/idp-microsoft-entra.md

Summary

Updated workflow step to clarify metadata file download occurs after identity source change completion.

Security assessment

Procedural clarification for SAML configuration. No security vulnerability addressed.

Diff

diff --git a/singlesignon/latest/userguide/idp-microsoft-entra.md b/singlesignon/latest/userguide/idp-microsoft-entra.md
index 33895b92e..443a45ac2 100644
--- a//singlesignon/latest/userguide/idp-microsoft-entra.md
+++ b//singlesignon/latest/userguide/idp-microsoft-entra.md
@@ -317 +317 @@ In this step, you will launch the **Change identity source** wizard from within
-  4. On the **Configure external identity provider** page, under **Service provider metadata** , choose **Default IPv4** or **Dual-stack** , then select **Download metadata file** to download the XML file.
+  4. On the **Configure external identity provider** page, under **Service provider metadata** , choose **Default IPv4** or **Dual-stack**. You can download the service provider metadata file after you complete the identity source change.