Merge branch 'main' of https://github.com/MicrosoftDocs/azure-docs-pr

Author: JnHs

.openpublishing.publish.config.json

@@ -1189,11 +1189,14 @@
   "articles/data-catalog/.openpublishing.redirection.data-catalog.json",
   "articles/data-factory/.openpublishing.redirection.data-factory.json",
   "articles/data-lake-analytics/.openpublishing.redirection.data-lake-analytics.json",
+  "articles/deployment-environments/.openpublishing.redirection.deployment-environments.json",
+  "articles/dev-box/.openpublishing.redirection.dev-box.json",
   "articles/digital-twins/.openpublishing.redirection.digital-twins.json",
   "articles/event-grid/.openpublishing.redirection.event-grid.json",
   "articles/event-hubs/.openpublishing.redirection.event-hubs.json",
   "articles/hdinsight/.openpublishing.redirection.hdinsight.json",
   "articles/healthcare-apis/.openpublishing.redirection.healthcare-apis.json",
+  "articles/internet-peering/.openpublishing.redirection.internet-peering.json",
   "articles/iot-accelerators/.openpublishing.redirection.iot-accelerators.json",
   "articles/iot-central/.openpublishing.redirection.iot-central.json",
   "articles/iot-develop/.openpublishing.redirection.iot-develop.json",
@@ -1208,9 +1211,12 @@
   "articles/mariadb/.openpublishing.redirection.mariadb.json",
   "articles/marketplace/.openpublishing.redirection.marketplace.json",
   "articles/mysql/.openpublishing.redirection.mysql.json",
+  "articles/network-watcher/.openpublishing.redirection.network-watcher.json",
   "articles/object-anchors/.openpublishing.redirection.object-anchors.json",
+  "articles/peering-service/.openpublishing.redirection.peering-service.json",
   "articles/postgresql/.openpublishing.redirection.postgresql.json",
   "articles/purview/.openpublishing.redirection.purview.json",
+  "articles/route-server/.openpublishing.redirection.route-server.json",
   "articles/sap/.openpublishing.redirection.sap.json",
   "articles/service-bus-messaging/.openpublishing.redirection.service-bus-messaging.json",
   "articles/spatial-anchors/.openpublishing.redirection.spatial-anchors.json",
@@ -1220,10 +1226,6 @@
   "articles/stream-analytics/.openpublishing.redirection.stream-analytics.json",
   "articles/synapse-analytics/.openpublishing.redirection.synapse-analytics.json",
   "articles/virtual-machine-scale-sets/.openpublishing.redirection.virtual-machine-scale-sets.json",
-  "articles/virtual-machines/.openpublishing.redirection.virtual-machines.json",
-  "articles/dev-box/.openpublishing.redirection.dev-box.json",
-  "articles/deployment-environments/.openpublishing.redirection.deployment-environments.json",
-  "articles/network-watcher/.openpublishing.redirection.network-watcher.json",
-  "articles/route-server/.openpublishing.redirection.route-server.json"
+  "articles/virtual-machines/.openpublishing.redirection.virtual-machines.json"
 ]
 }

.openpublishing.redirection.active-directory.json

@@ -5460,6 +5460,11 @@
       "redirect_url": "/azure/active-directory/fundamentals/concept-fundamentals-security-defaults",
       "redirect_document_id": true
     },
+    {
+      "source_path_from_root": "/articles/active-directory/reports-monitoring/reference-azure-ad-sla-performance.md",
+      "redirect_url": "/azure/active-directory/reports-monitoring/reference-sla-performance",
+      "redirect_document_id": true
+    },
     {
       "source_path_from_root": "/articles/active-directory/reports-monitoring/quickstart-filter-audit-log.md",
       "redirect_url": "/azure/active-directory/reports-monitoring/howto-customize-filter-logs",

.openpublishing.redirection.json

@@ -14442,121 +14442,6 @@
             "redirect_url": "/azure/networking/fundamentals/networking-overview",
             "redirect_document_id": false
         },
-        {
-            "source_path_from_root": "/articles/network-watcher/connection-monitor-preview-create-using-portal.md",
-            "redirect_url": "/azure/network-watcher/connection-monitor-create-using-portal",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/connection-monitor-preview-create-using-arm-client.md",
-            "redirect_url": "/azure/network-watcher/connection-monitor-create-using-template",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/connection-monitor-preview.md",
-            "redirect_url": "/azure/network-watcher/connection-monitor-overview",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-check-next-hop-portal.md",
-            "redirect_url": "/azure/network-watcher/diagnose-vm-network-routing-problem",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-check-next-hop-cli.md",
-            "redirect_url": "/azure/network-watcher/diagnose-vm-network-routing-problem-cli",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-check-next-hop-cli-nodejs.md",
-            "redirect_url": "/azure/network-watcher/diagnose-vm-network-routing-problem-cli",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-check-next-hop-powershell.md",
-            "redirect_url": "/azure/network-watcher/diagnose-vm-network-routing-problem-powershell",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-check-ip-flow-verify-portal.md",
-            "redirect_url": "/azure/network-watcher/diagnose-vm-network-traffic-filtering-problem",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-check-ip-flow-verify-cli.md",
-            "redirect_url": "/azure/network-watcher/diagnose-vm-network-traffic-filtering-problem-cli",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-check-ip-flow-verify-cli-nodejs.md",
-            "redirect_url": "/azure/network-watcher/diagnose-vm-network-traffic-filtering-problem-cli",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-check-ip-flow-verify-powershell.md",
-            "redirect_url": "/azure/network-watcher/diagnose-vm-network-traffic-filtering-problem-powershell",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/migrate-to-connection-monitor-preview-from-connection-monitor.md",
-            "redirect_url": "/azure/network-watcher/migrate-to-connection-monitor-from-connection-monitor-classic",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/migrate-to-connection-monitor-preview-from-network-performance-monitor.md",
-            "redirect_url": "/azure/network-watcher/migrate-to-connection-monitor-from-network-performance-monitor",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-nsg-flow-logging-cli-nodejs.md",
-            "redirect_url": "/azure/network-watcher/network-watcher-nsg-flow-logging-cli",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/prepare-flow-log.md",
-            "redirect_url": "/azure/network-watcher/network-watcher-nsg-flow-logging-overview",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-packet-capture-manage-cli-nodejs.md",
-            "redirect_url": "/azure/network-watcher/network-watcher-packet-capture-manage-cli",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-security-group-view-cli-nodejs.md",
-            "redirect_url": "/azure/network-watcher/network-watcher-security-group-view-cli",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-troubleshoot-manage-cli-nodejs.md",
-            "redirect_url": "/azure/network-watcher/network-watcher-troubleshoot-manage-cli",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-topology-cli.md",
-            "redirect_url": "/azure/network-watcher/view-network-topology",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-topology-cli-nodejs.md",
-            "redirect_url": "/azure/network-watcher/view-network-topology",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-topology-overview.md",
-            "redirect_url": "/azure/network-watcher/view-network-topology",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-topology-powershell.md",
-            "redirect_url": "/azure/network-watcher/view-network-topology",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-topology-rest.md",
-            "redirect_url": "/azure/network-watcher/view-network-topology",
-            "redirect_document_id": false
-        },
         {
             "source_path_from_root": "/articles/notebooks/index.yml",
             "redirect_url": "https://notebooks.azure.com",
@@ -20357,16 +20242,6 @@
             "redirect_url": "/rest/api/load-balancer/loadbalancers/createorupdate",
             "redirect_document_id": false
         },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-check-next-hop-rest.md",
-            "redirect_url": "/rest/api/network-watcher/networkwatchers/getnexthop",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-check-ip-flow-verify-rest.md",
-            "redirect_url": "/rest/api/network-watcher/networkwatchers/verifyipflow",
-            "redirect_document_id": false
-        },
         {
             "source_path_from_root": "/articles/resource-group-link-resources.md",
             "redirect_url": "/rest/api/resources/resourcelinks",
@@ -24543,22 +24418,22 @@
         },
         {
             "source_path_from_root": "/articles/active-directory/develop/single-page-app-tutorial-01-register-app.md",
-            "redirect_url": "/azure/active-directory/develop/tutorial-single-page-app-react-register-app.md",
+            "redirect_url": "/azure/active-directory/develop/tutorial-single-page-app-react-register-app",
             "redirect_document_id": false
         },
         {
             "source_path_from_root": "/articles/active-directory/develop/single-page-app-tutorial-02-prepare-spa.md",
-            "redirect_url": "/azure/active-directory/develop/tutorial-single-page-app-react-prepare-spa.md",
+            "redirect_url": "/azure/active-directory/develop/tutorial-single-page-app-react-prepare-spa",
             "redirect_document_id": false
         },
         {
             "source_path_from_root": "/articles/active-directory/develop/single-page-app-tutorial-03-sign-in-users.md",
-            "redirect_url": "/azure/active-directory/develop/tutorial-single-page-app-react-sign-in-users.md",
+            "redirect_url": "/azure/active-directory/develop/tutorial-single-page-app-react-sign-in-users",
             "redirect_document_id": false
         },
         {
             "source_path_from_root": "/articles/active-directory/develop/single-page-app-tutorial-04-call-api.md",
-            "redirect_url": "/azure/active-directory/develop/tutorial-single-page-app-react-call-api.md",
+            "redirect_url": "/azure/active-directory/develop/tutorial-single-page-app-react-call-api",
             "redirect_document_id": false
         }
     ]

articles/active-directory/app-provisioning/known-issues.md

@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.subservice: app-provisioning
 ms.workload: identity
 ms.topic: troubleshooting
-ms.date: 09/21/2023
+ms.date: 09/28/2023
 ms.reviewer: arvinh
 zone_pivot_groups: app-provisioning-cross-tenant-synchronization
 ---
@@ -106,7 +106,7 @@ Attribute-mapping expressions can have a maximum of 10,000 characters.
 
 #### Unsupported scoping filters
 
-Directory extensions and the **appRoleAssignments**, **userType**, and **accountExpires** attributes aren't supported as scoping filters.
+The **appRoleAssignments**, **userType**, and **accountExpires** attributes aren't supported as scoping filters.
 
 #### Multivalue directory extensions
 

articles/active-directory/app-provisioning/sap-successfactors-integration-reference.md

@@ -24,7 +24,7 @@ ms.reviewer: chmutali
 This article explains how the integration works and how you can customize the provisioning behavior for different HR scenarios. 
 
 ## Establishing connectivity 
-Microsoft Entra provisioning service uses basic authentication to connect to Employee Central OData API endpoints. When setting up the SuccessFactors provisioning app, use the *Tenant URL* parameter in the *Admin Credentials* section to configure the [API data center URL](https://apps.support.sap.com/sap/support/knowledge/en/2215682). 
+Microsoft Entra provisioning service uses basic authentication to connect to Employee Central OData API endpoints. When setting up the SuccessFactors provisioning app, use the *Tenant URL* parameter in the *Admin Credentials* section to configure the [API data center URL](https://help.sap.com/docs/SAP_SUCCESSFACTORS_PLATFORM/d599f15995d348a1b45ba5603e2aba9b/af2b8d5437494b12be88fe374eba75b6.html). 
 
 To further secure the connectivity between Microsoft Entra provisioning service and SuccessFactors, add the Microsoft Entra IP ranges in the SuccessFactors IP allowlist:
 

articles/active-directory/app-provisioning/skip-out-of-scope-deletions.md

@@ -59,10 +59,10 @@ Copy the Response into a text file. It looks like the JSON text shown, with valu
 Here's the JSON block to add to the mapping. 
 
 ```json
-        {
-            "key": "SkipOutOfScopeDeletions",
-            "value": "True"
-        }
+{
+  "key": "SkipOutOfScopeDeletions",
+  "value": "True"
+}
 ```
 
 ## Step 4: Update the secrets endpoint with the SkipOutOfScopeDeletions flag

articles/active-directory/authentication/concept-certificate-based-authentication-technical-deep-dive.md

@@ -6,7 +6,7 @@ services: active-directory
 ms.service: active-directory
 ms.subservice: authentication
 ms.topic: how-to
-ms.date: 09/25/2023
+ms.date: 09/27/2023
 
 
 ms.author: justinha
@@ -49,15 +49,21 @@ Now we'll walk through each step:
 
    :::image type="content" border="true" source="./media/concept-certificate-based-authentication-technical-deep-dive/sign-in-alt.png" alt-text="Screenshot of the Sign-in if FIDO2 is also enabled.":::
 
-1. Once the user selects certificate-based authentication, the client is redirected to the certauth endpoint, which is [https://certauth.login.microsoftonline.com](https://certauth.login.microsoftonline.com) or [`https://t<tenant id>.certauth.login.microsoftonline.com`](`https://t<tenant id>.certauth.login.microsoftonline.com`) for Azure Global. For [Azure Government](../../azure-government/compare-azure-government-global-azure.md#guidance-for-developers), the certauth endpoint is [https://certauth.login.microsoftonline.us](https://certauth.login.microsoftonline.us).  
+1. Once the user selects certificate-based authentication, the client is redirected to the certauth endpoint, which is [https://certauth.login.microsoftonline.com](https://certauth.login.microsoftonline.com) for Azure Global. For [Azure Government](../../azure-government/compare-azure-government-global-azure.md#guidance-for-developers), the certauth endpoint is [https://certauth.login.microsoftonline.us](https://certauth.login.microsoftonline.us).  
 
-   The endpoint performs TLS mutual authentication, and requests the client certificate as part of the TLS handshake. You'll see an entry for this request in the Sign-ins log.
+However, with the issue hints feature enabled (coming soon), the new certauth endpoint will change to `https://t{tenantid}.certauth.login.microsoftonline.com`.
+
+The endpoint performs TLS mutual authentication, and requests the client certificate as part of the TLS handshake. You'll see an entry for this request in the Sign-ins log.
 
-   :::image type="content" border="true" source="./media/concept-certificate-based-authentication-technical-deep-dive/sign-in-log.png" alt-text="Screenshot of the Sign-ins log in Microsoft Entra ID." lightbox="./media/concept-certificate-based-authentication-technical-deep-dive/sign-in-log.png":::
-   
    >[!NOTE]
-   >The network administrator should allow access to the User sign-in page and certauth endpoint *.certauth.login.microsoftonline.com for the customer’s cloud environment. Disable TLS inspection on the certauth endpoint to make sure the client certificate request succeeds as part of the TLS handshake.
+   >The network administrator should allow access to the User sign-in page and certauth endpoint `*.certauth.login.microsoftonline.com` for the customer's cloud environment. Disable TLS inspection on the certauth endpoint to make sure the client certificate request succeeds as part of the TLS handshake.
+
+   Customers should make sure their TLS inspection disablement also work for the new url with issuer hints. Our recommendation is not to hardcode the url with tenantId as for B2B users the tenantId might change. Use a regular expression to allow both the old and new URL to work for TLS inspection disablement. For example, use `*.certauth.login.microsoftonline.com` or `*certauth.login.microsoftonline.com`for Azure Global tenants, and `*.certauth.login.microsoftonline.us` or `*certauth.login.microsoftonline.us` for Azure Government tenants, depending on the proxy used.
 
+   Without this change, certificate-based authentication will fail when you enable Issuer Hints feature.
+
+   :::image type="content" border="true" source="./media/concept-certificate-based-authentication-technical-deep-dive/sign-in-log.png" alt-text="Screenshot of the Sign-ins log in Microsoft Entra ID." lightbox="./media/concept-certificate-based-authentication-technical-deep-dive/sign-in-log.png":::
+   
    Click the log entry to bring up **Activity Details** and click **Authentication Details**. You'll see an entry for the X.509 certificate.
 
    :::image type="content" border="true" source="./media/concept-certificate-based-authentication-technical-deep-dive/entry.png" alt-text="Screenshot of the entry for X.509 certificate.":::