AWS singlesignon documentation change
Summary
Clarified enabling process for existing organizations vs standalone accounts. Added tip about creating account instances and refined account instance guidance.
Security assessment
Changes provide clearer onboarding instructions without addressing security vulnerabilities or introducing security features. No security fixes or vulnerability mentions present.
Diff
diff --git a/singlesignon/latest/userguide/enable-identity-center.md b/singlesignon/latest/userguide/enable-identity-center.md index 35575d25a..00fbdfe71 100644 --- a//singlesignon/latest/userguide/enable-identity-center.md +++ b//singlesignon/latest/userguide/enable-identity-center.md @@ -59 +59,3 @@ Perform this step only if you've configured the necessary permissions for use of - 5. On the **Enable IAM Identity Center with AWS Organizations** page, review the information and then select **Enable** to complete the process. + * If you are signed in to the management account of an existing organization, IAM Identity Center begins enabling. Proceed to set up your environment. + + * If you have a standalone AWS account (not part of an organization), you see the **Enable IAM Identity Center with AWS Organizations** page. This option creates a new organization with your account as the management account. Review the information and choose **Enable** to complete the process. @@ -64,0 +67,4 @@ AWS Organizations can have IAM Identity Center enabled only in a single AWS Regi +###### Tip + +If you have a standalone account and want to create an account instance instead of an organization instance, see the **Account** tab. + @@ -94,3 +100 @@ Account -You see the **Enable IAM Identity Center with AWS Organizations** page. We recommend this option, but it is not required. - -Select the link **enable an account instance of IAM Identity Center**. +You see the **Enable IAM Identity Center with AWS Organizations** page. This creates an organization instance, which we recommend. However, if you prefer an account instance instead, select the link **enable an account instance of IAM Identity Center**.