If an access configuration has been provisioned for the accounts in your resource directory but the access configuration is modified, you must manually re-provision the access configuration for the modifications to take effect. The reason is that the modifications cannot be automatically applied to the accounts.
Background information
If one of the following modifications is made to an access configuration, you must re-provision the access configuration:
A system policy is added or removed.
An inline policy is created, modified, or deleted.
If the session duration and relay state are modified, you do not need to re-provision the access configuration.
Re-provision an access configuration on the Access Configuration Management page
Log on to the CloudSSO console.
In the left-side navigation pane, click Access Configuration Management.
On the Access Configuration Management page, click the name of the required access configuration.
The system automatically identifies the access configurations that need to be re-provisioned. Provisioning Status for these access configurations is Reprovisioning Required.
On the page that appears, click the Provisioning tab.
Select the required account in your resource directory.
The system automatically identifies the accounts for which the access configuration needs to be re-provisioned in your resource directory. Provisioning Status for these accounts is Re-provisioning Required.
Click Re-provision.
After the re-provisioning is complete, Provisioning Status is displayed as Provisioned.
Re-provision an access configuration on the Multi-account Permission Configuration page
Log on to the CloudSSO console.
In the left-side navigation pane, click Multi-account Permission Configuration.
On the Multi-account Permission Configuration page, click the name of the required account.
On the page that appears, click the Provisioned Access Configurations tab.
Select the access configuration that needs to be re-provisioned.
The system automatically identifies the access configurations that need to be re-provisioned. Provisioning Status for these access configurations is Reprovisioning Required.
Click Re-provision.
After the re-provisioning is complete, Provisioning Status is displayed as Provisioned.