Merge pull request #218921 from MicrosoftDocs/main

Publish to live, Friday 4 AM PST 11/18

Author: Maggiemouse1

articles/active-directory/app-provisioning/hr-attribute-retrieval-issues.md

@@ -40,7 +40,9 @@ ms.reviewer: chmutali
 
 **Suggested workarounds**
  * **Option 1: Using Workday Provisioning Groups**: Check if the calculated field value can be represented as a provisioning group in Workday. Using the same logic that is used for the calculated field, your Workday Admin may be able to assign a Provisioning Group to the user. Reference Workday doc that requires Workday login: [Set Up Account Provisioning Groups](https://doc.workday.com/reader/3DMnG~27o049IYFWETFtTQ/keT9jI30zCzj4Nu9pJfGeQ). Once configured, this Provisioning Group assignment can be [retrieved in the provisioning job](../app-provisioning/workday-integration-reference.md#example-3-retrieving-provisioning-group-assignments) and used in attribute mappings and scoping filter. 
-* **Option 2: Using Workday Custom IDs**: Check if the calculated field value can be represented as a Custom ID on the Worker Profile. Use `Maintain Custom ID Type` task in Workday to define a new type and populate values in this custom ID. Make sure the [Workday ISU account used for the integration](../saas-apps/workday-inbound-tutorial.md#configuring-domain-security-policy-permissions) has domain security permission for `Person Data: ID Information`. For example, you can define "External_Payroll_ID" as a custom ID in Workday and retrieved it using the XPATH: `wd:Worker/wd:Worker_Data/wd:Personal_Data/wd:Identification_Data/wd:Custom_ID/wd:Custom_ID_Data[wd:ID_Type_Reference/wd:ID[@wd:type=\"Custom_ID_Type_ID\"]=\"External_Payroll_ID\"]/wd:ID/text()`
+* **Option 2: Using Workday Custom IDs**: Check if the calculated field value can be represented as a Custom ID on the Worker Profile. Use `Maintain Custom ID Type` task in Workday to define a new type and populate values in this custom ID. Make sure the [Workday ISU account used for the integration](../saas-apps/workday-inbound-tutorial.md#configuring-domain-security-policy-permissions) has domain security permission for `Person Data: ID Information`. 
+  * Example 1: Let's say you have a calculated field called Payroll ID. You can define "External_Payroll_ID" as a custom ID in Workday and retrieve it using an XPATH that uses "Custom_ID_Type_ID" as the selecting mechanism:  `wd:Worker/wd:Worker_Data/wd:Personal_Data/wd:Identification_Data/wd:Custom_ID/wd:Custom_ID_Data[string(wd:ID_Type_Reference/wd:ID[@wd:type='Custom_ID_Type_ID']='External_Payroll_ID']/wd:ID/text()`
+  * Example 2: Let's say you have a calculated field called Badge ID. You can define "Badge ID" as a custom ID in Workday and retrieve the "Descriptor" attribute corresponding to it with an XPATH that uses "wd:ID_Type_Reference/@wd:Descriptor" as the selecting mechanism:  `wd:Worker/wd:Worker_Data/wd:Personal_Data/wd:Identification_Data/wd:Custom_ID[string(wd:Custom_ID_Data/wd:ID_Type_Reference/@wd:Descriptor)='BADGE ID']/wd:Custom_ID_Reference/@wd:Descriptor`
 
 
 ## Next steps

articles/active-directory/authentication/TOC.yml

@@ -26,6 +26,8 @@
     items:
     - name: Overview
       href: concept-authentication-methods.md
+    - name: Manage 
+      href: concept-authentication-methods-manage.md
     - name: Microsoft Authenticator app
       href: concept-authentication-authenticator-app.md
     - name: OATH tokens
@@ -84,6 +86,80 @@
     href: concept-resilient-controls.md
 - name: How-to guides
   items:
+  - name: Manage authentication methods
+    href: how-to-authentication-methods-manage.md      
+  - name: Passwordless
+    items: 
+      - name: Deploying passwordless
+        href: howto-authentication-passwordless-deployment.md
+      - name: Passwordless FIDO2 security keys
+        items:
+          - name: Enable FIDO2 security keys 
+            href: howto-authentication-passwordless-security-key.md
+          - name: Sign in to Windows 10 devices
+            href: howto-authentication-passwordless-security-key-windows.md
+          - name: SSO to on-premises resources
+            href: howto-authentication-passwordless-security-key-on-premises.md
+          - name: Hybrid FAQs
+            href: howto-authentication-passwordless-faqs.md
+          - name: Troubleshoot hybrid
+            href: howto-authentication-passwordless-troubleshoot.md
+      - name: Passwordless phone sign-in
+        items:
+        - name: Manage
+          href: howto-authentication-passwordless-phone.md
+        - name: Run a registration campaign
+          href: how-to-mfa-registration-campaign.md
+        - name: Use number matching 
+          href: how-to-mfa-number-match.md
+        - name: Use additional context 
+          href: how-to-mfa-additional-context.md
+        - name: Use Microsoft managed settings 
+          href: how-to-mfa-microsoft-managed.md
+      - name: Windows Hello for Business
+        href: /windows/security/identity-protection/hello-for-business/hello-identity-verification
+      - name: Use a Temporary Access Pass
+        href: howto-authentication-temporary-access-pass.md
+      - name: Use SMS-based authentication
+        items:  
+        - name: Manage
+          href: howto-authentication-sms-signin.md
+        - name: Supported apps for SMS-based authentication
+          href: how-to-authentication-sms-supported-apps.md
+        - name: Two-way SMS unsupported
+          href: how-to-authentication-two-way-sms-unsupported.md
+      - name: Use email address sign-in
+        href: howto-authentication-use-email-signin.md
+      - name: Certificate-based authentication
+        items:
+        - name: Azure AD CBA
+          items:
+          - name: Overview
+            href: concept-certificate-based-authentication.md
+          - name: How Azure AD CBA works
+            href: concept-certificate-based-authentication-technical-deep-dive.md
+          - name: Configure Azure AD CBA
+            href: how-to-certificate-based-authentication.md
+          - name: Windows smart card logon
+            href: concept-certificate-based-authentication-smartcard.md
+          - name: iOS devices
+            href: concept-certificate-based-authentication-mobile-ios.md
+          - name: Android devices
+            href: concept-certificate-based-authentication-mobile-android.md
+          - name: Certificate user IDs
+            href: concept-certificate-based-authentication-certificateuserids.md
+          - name: Migrate federated users
+            href: concept-certificate-based-authentication-migration.md
+          - name: FAQ
+            href: certificate-based-authentication-faq.yml
+        - name: Federated CBA with Azure AD
+          items:
+          - name: Configure CBA with federation
+            href: active-directory-certificate-based-authentication-get-started.md
+          - name: Use on Android Devices
+            href: active-directory-certificate-based-authentication-android.md
+          - name: Use on iOS Devices
+            href: active-directory-certificate-based-authentication-ios.md
   - name: Self-service password reset
     items:
     - name: Deployment guide
@@ -130,26 +206,6 @@
         href: howto-mfa-nps-extension-rdg.md
       - name: VPN
         href: howto-mfa-nps-extension-vpn.md
-  - name: Passwordless
-    items: 
-      - name: Deploying passwordless
-        href: howto-authentication-passwordless-deployment.md
-      - name: Passwordless FIDO2 security keys
-        items:
-          - name: Enable FIDO2 security keys for your tenant
-            href: howto-authentication-passwordless-security-key.md
-          - name: Sign in to Windows 10 devices
-            href: howto-authentication-passwordless-security-key-windows.md
-          - name: SSO to on-premises resources
-            href: howto-authentication-passwordless-security-key-on-premises.md
-          - name: Hybrid FAQs
-            href: howto-authentication-passwordless-faqs.md
-          - name: Troubleshoot hybrid
-            href: howto-authentication-passwordless-troubleshoot.md
-      - name: Passwordless phone sign-in
-        href: howto-authentication-passwordless-phone.md
-      - name: Windows Hello for Business
-        href: /windows/security/identity-protection/hello-for-business/hello-identity-verification
   - name: Security info registration
     items:
     - name: Enable combined registration
@@ -170,54 +226,8 @@
       href: howto-password-ban-bad-on-premises-faq.yml
     - name: Agent version history
       href: howto-password-ban-bad-on-premises-agent-versions.md
-  - name: Run a registration campaign
-    href: how-to-mfa-registration-campaign.md
-  - name: Use number matching 
-    href: how-to-mfa-number-match.md
-  - name: Use additional context 
-    href: how-to-mfa-additional-context.md
-  - name: Use a Temporary Access Pass
-    href: howto-authentication-temporary-access-pass.md
-  - name: Use SMS-based authentication
-    href: howto-authentication-sms-signin.md
-  - name: Supported apps for SMS-based authentication
-    href: how-to-authentication-sms-supported-apps.md
-  - name: Two-way SMS unsupported
-    href: how-to-authentication-two-way-sms-unsupported.md
-  - name: Use email address sign-in
-    href: howto-authentication-use-email-signin.md
   - name: Azure AD smart lockout
     href: howto-password-smart-lockout.md
-  - name: Certificate-based authentication
-    items:
-    - name: Azure AD CBA
-      items:
-      - name: Overview
-        href: concept-certificate-based-authentication.md
-      - name: How Azure AD CBA works
-        href: concept-certificate-based-authentication-technical-deep-dive.md
-      - name: Configure Azure AD CBA
-        href: how-to-certificate-based-authentication.md
-      - name: Windows SmartCard logon
-        href: concept-certificate-based-authentication-smartcard.md
-      - name: iOS devices
-        href: concept-certificate-based-authentication-mobile-ios.md
-      - name: Android devices
-        href: concept-certificate-based-authentication-mobile-android.md
-      - name: Certificate user IDs
-        href: concept-certificate-based-authentication-certificateuserids.md
-      - name: Migrate federated users
-        href: concept-certificate-based-authentication-migration.md
-      - name: FAQ
-        href: certificate-based-authentication-faq.yml
-    - name: Federated CBA with Azure AD
-      items:
-      - name: Configure CBA with federation
-        href: active-directory-certificate-based-authentication-get-started.md
-      - name: Use on Android Devices
-        href: active-directory-certificate-based-authentication-android.md
-      - name: Use on iOS Devices
-        href: active-directory-certificate-based-authentication-ios.md
   - name: Reporting
     items:
     - name: Authentication methods activity