AWS quick documentation change
Summary
Added documentation for Trusted Token Issuer Setup during extension access configuration, including steps to note the trusted token issuer ARN and configure Aud claim with client ID from identity provider.
Security assessment
The changes add documentation about setting up a trusted token issuer for OIDC authentication, which is a security feature for establishing trusted identity sources. This improves security by ensuring proper authentication configuration but doesn't indicate a specific security vulnerability being fixed.
Diff
diff --git a/quick/latest/userguide/outlook-extension.md b/quick/latest/userguide/outlook-extension.md index d5f3812a1..749489ac8 100644 --- a//quick/latest/userguide/outlook-extension.md +++ b//quick/latest/userguide/outlook-extension.md @@ -152,0 +153,2 @@ The issuer URL should be the OIDC discovery endpoint of your identity without th + 6. Note the trusted token issuer ARN. You will need this in a later step. + @@ -220,0 +223,2 @@ The issuer URL should be the OIDC discovery endpoint of your identity without th + 6. Note the trusted token issuer ARN. You will need this in a later step. + @@ -319 +323,11 @@ Now you can follow these steps to create a new extension access configuration th - 6. Select **Microsoft Outlook**. Then, choose **Next**. + 6. If this is your first time setting up extension access, you are prompted to complete the **Trusted Token Issuer Setup**. Configure the following fields and then choose **Next** : + + * **Trusted Token Issuer ARN** – Enter the trusted token issuer ARN that you noted from the earlier steps. + + * **Aud claim** – Enter the client ID from your app registration (Entra ID) or app integration (Okta) that you saved from the earlier steps. + +###### Note + +This is a one-time setup that establishes a trusted identity source for all extensions. Once completed, you won't need to do this again for other extension accesses. + + 7. Select **Microsoft Outlook**. Then, choose **Next**. @@ -321 +335 @@ Now you can follow these steps to create a new extension access configuration th - 7. Configure the following fields: + 8. Configure the following fields: @@ -333 +347 @@ Now you can follow these steps to create a new extension access configuration th - 8. Choose **Add** to save the new access configuration. + 9. Choose **Add** to save the new access configuration. @@ -337 +351 @@ A success message will open up on the top right of your screen. - 9. From the success message, choose **View extensions** to finish installing your extension. + 10. From the success message, choose **View extensions** to finish installing your extension.