AWS IAM: Fix SAML bindings URL in assertions documentation
Summary
Updated the URL for the SAML 2.0 HTTP POST Binding standard.
Security assessment
The change corrects a documentation link without addressing security weaknesses or enhancing security practices.
Evidence
+After you have verified a user's identity in your organization, the external identity provider (IdP) sends an authentication response to the AWS sign-in endpoint URL. This response is a POST request that includes a SAML token that adheres to the [HTTP POST Binding for SAML 2.0](http://docs.oasis-open.org/security/saml/v2.0/saml-bindings-2.0-os.pdf) standard and that contains the following elements, or _claims_.
Diff
diff --git a/IAM/latest/UserGuide/id_roles_providers_create_saml_assertions.md b/IAM/latest/UserGuide/id_roles_providers_create_saml_assertions.md index 5328fec29..a69efc9be 100644 --- a//IAM/latest/UserGuide/id_roles_providers_create_saml_assertions.md +++ b//IAM/latest/UserGuide/id_roles_providers_create_saml_assertions.md @@ -11 +11 @@ Subject and NameIDPrincipalTag SAML attributeRole SAML attributeRoleSessionName -After you have verified a user's identity in your organization, the external identity provider (IdP) sends an authentication response to the AWS sign-in endpoint URL. This response is a POST request that includes a SAML token that adheres to the [HTTP POST Binding for SAML 2.0](https://docs.aws.amazon.com/http://docs.oasis-open.org/security/saml/v2.0/saml-bindings-2.0-os.pdf) standard and that contains the following elements, or _claims_. You configure these claims in your SAML-compatible IdP. Refer to the documentation for your IdP for instructions on how to enter these claims. +After you have verified a user's identity in your organization, the external identity provider (IdP) sends an authentication response to the AWS sign-in endpoint URL. This response is a POST request that includes a SAML token that adheres to the [HTTP POST Binding for SAML 2.0](http://docs.oasis-open.org/security/saml/v2.0/saml-bindings-2.0-os.pdf) standard and that contains the following elements, or _claims_. You configure these claims in your SAML-compatible IdP. Refer to the documentation for your IdP for instructions on how to enter these claims.