AWS quick documentation change
Summary
Added documentation for Trusted Token Issuer Setup during initial extension access configuration, including steps to note the issuer ARN and configure ARN and Aud claim fields. Updated step numbering accordingly.
Security assessment
The change adds documentation about configuring a trusted token issuer (OIDC identity provider) and specifying the audience claim (Aud claim) for Microsoft Word extension access. This is a security feature that establishes trusted identity sources for authentication. While it enhances security documentation, there's no evidence it addresses a specific security vulnerability or incident.
Diff
diff --git a/quick/latest/userguide/word-extension.md b/quick/latest/userguide/word-extension.md index fcebc0787..b05361896 100644 --- a//quick/latest/userguide/word-extension.md +++ b//quick/latest/userguide/word-extension.md @@ -154,0 +155,2 @@ The issuer URL should be the OIDC discovery endpoint of your identity without th + 6. Note the trusted token issuer ARN. You will need this in a later step. + @@ -222,0 +225,2 @@ The issuer URL should be the OIDC discovery endpoint of your identity without th + 6. Note the trusted token issuer ARN. You will need this in a later step. + @@ -321 +325,11 @@ Now you can follow these steps to create a new extension access configuration th - 6. Select **Microsoft Word**. Then, choose **Next**. + 6. If this is your first time setting up extension access, you are prompted to complete the **Trusted Token Issuer Setup**. Configure the following fields and then choose **Next** : + + * **Trusted Token Issuer ARN** – Enter the trusted token issuer ARN that you noted from the earlier steps. + + * **Aud claim** – Enter the client ID from your app registration (Entra ID) or app integration (Okta) that you saved from the earlier steps. + +###### Note + +This is a one-time setup that establishes a trusted identity source for all extensions. Once completed, you won't need to do this again for other extension accesses. + + 7. Select **Microsoft Word**. Then, choose **Next**. @@ -323 +337 @@ Now you can follow these steps to create a new extension access configuration th - 7. Configure the following fields: + 8. Configure the following fields: @@ -335 +349 @@ Now you can follow these steps to create a new extension access configuration th - 8. Choose **Add** to save the new access configuration. + 9. Choose **Add** to save the new access configuration. @@ -339 +353 @@ A success message will open up on the top right of your screen. - 9. From the success message, choose **View extensions** to finish installing your extension. + 10. From the success message, choose **View extensions** to finish installing your extension.