AWS cognito: Wording tweak in SAML IdP signing/encryption note
Summary
Editorial change from "Your provider will have documentation about configuring these features" to "Your provider has documentation about configuring these features" in the SAML request signing and response encryption guidance.
Security assessment
Only a verb-tense/wording change ("will have" to "has"). The underlying SAML signing and encryption guidance is pre-existing and unaltered, so this is not a security fix or new security documentation.
Evidence
+To sign SAML requests, you must configure your IdP to trust requests signed by your user pool signing certificate. To accept encrypted SAML responses, you must configure your IdP to encrypt _all_ SAML responses to your user pool. Your provider has documentation about configuring these features. For an example from Microsoft, see [Configure Microsoft Entra SAML token encryption](https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/howto-saml-token-encryption).
Diff
diff --git a/cognito/latest/developerguide/cognito-user-pools-integrating-3rd-party-saml-providers.md b/cognito/latest/developerguide/cognito-user-pools-integrating-3rd-party-saml-providers.md index 7861c83..c4e5035 100644 --- a//cognito/latest/developerguide/cognito-user-pools-integrating-3rd-party-saml-providers.md +++ b//cognito/latest/developerguide/cognito-user-pools-integrating-3rd-party-saml-providers.md @@ -19 +19 @@ The following configuration information for third-party SAML 2.0 IdP solutions i -To sign SAML requests, you must configure your IdP to trust requests signed by your user pool signing certificate. To accept encrypted SAML responses, you must configure your IdP to encrypt _all_ SAML responses to your user pool. Your provider will have documentation about configuring these features. For an example from Microsoft, see [Configure Microsoft Entra SAML token encryption](https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/howto-saml-token-encryption). +To sign SAML requests, you must configure your IdP to trust requests signed by your user pool signing certificate. To accept encrypted SAML responses, you must configure your IdP to encrypt _all_ SAML responses to your user pool. Your provider has documentation about configuring these features. For an example from Microsoft, see [Configure Microsoft Entra SAML token encryption](https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/howto-saml-token-encryption).