ugs26 (ugs26) asked a question.
AWS Account Federation Application - Duplicate user details for the same application but different user is allowed.
On AWS Account Federation Application, is case the userName or email field are editable, it is possible tho save two different users with the same userName or email
Step to reproduce:
1) Generate a AWS Account Federation Application
2) Assign to the people -> choose X user and provide him userName user1 and save
3) Assign to the people -> choose Y user .
Expected result : save is not allowed
Actual Result: save is allowed
Hello @ugs26 (ugs26)
I hope you are having a great day
Thank you for posting, Yes, that is possible, email is not a unique attribute right now, the login name can be a unique attribute too.
What you cannot do its assign multiple accounts to individual users for a single application because it would dilute the integrity of the authentication.
you can learn more about the user attributes in the following link: https://help.okta.com/en/prod/Content/Topics/users-groups-profiles/usgp-user-profile-attributes-main.htm
Have a great day ahead
Henry E.
Okta Inc