Merge branch 'main' into release-preview-private-5g-core

Author: v-alje

articles/active-directory-b2c/faq.yml

@@ -8,12 +8,11 @@ metadata:
 
   ms.service: active-directory
   ms.workload: identity
-  ms.topic: conceptual
+  ms.topic: faq
   ms.date: 01/03/2022
   ms.author: kengaderdus
   ms.subservice: B2C
   ms.custom: "b2c-support"
-    
 title: 'Azure AD B2C: Frequently asked questions (FAQ)'
 summary: This page answers frequently asked questions about the Azure Active Directory B2C (Azure AD B2C). Keep checking back for updates.
 
@@ -253,4 +252,4 @@ sections:
       - question: |
           How do I report issues with Azure AD B2C?
         answer: |
-          See [File support requests for Azure Active Directory B2C](support-options.md).
+          See [File support requests for Azure Active Directory B2C](support-options.md).

articles/active-directory-domain-services/faqs.yml

@@ -10,10 +10,9 @@ metadata:
   ms.service: active-directory
   ms.subservice: domain-services
   ms.workload: identity
-  ms.topic: how-to
+  ms.topic: faq
   ms.date: 02/16/2022
   ms.author: justinha
-    
 title: Frequently asked questions (FAQs) about Azure Active Directory (AD) Domain Services
 summary: This page answers frequently asked questions about Azure Active Directory Domain Services.
 

articles/active-directory/app-proxy/application-proxy-faq.yml

@@ -8,11 +8,10 @@ metadata:
   ms.service: active-directory
   ms.subservice: app-proxy
   ms.workload: identity
-  ms.topic: reference
+  ms.topic: faq
   ms.date: 01/10/2022
   ms.author: kenwith
   ms.reviewer: ashishj
-    
 title: Active Directory (Azure AD) Application Proxy frequently asked questions
 summary: This page answers frequently asked questions about Azure Active Directory (Azure AD) Application Proxy.
 

articles/active-directory/authentication/active-directory-passwords-faq.yml

@@ -6,14 +6,13 @@ metadata:
   services: active-directory
   ms.service: active-directory
   ms.subservice: authentication
-  ms.topic: how-to
+  ms.topic: faq
   ms.date: 08/13/2021
   ms.author: justinha
   author: justinha
   manager: karenhoran
   ms.reviewer: rhicock
   ms.collection: M365-identity-device-management
-    
 title: Self-service password reset frequently asked questions
 summary: |
   The following are some frequently asked questions (FAQ) for all things related to self-service password reset.

articles/active-directory/authentication/certificate-based-authentication-faq.yml

@@ -6,14 +6,13 @@ metadata:
   services: multi-factor-authentication
   ms.service: active-directory
   ms.subservice: authentication
-  ms.topic: how-to
+  ms.topic: faq
   ms.date: 02/09/2022
   ms.author: justinha
   author: vimrang
   manager: karenhoran
   ms.reviewer: vimrang
   ms.collection: M365-identity-device-management
-    
 title: Frequently asked questions about Azure AD certificate-based authentication (CBA)
 summary: |
   This article addresses frequently asked questions about how Azure AD certificate-based authentication (CBA) works. 
@@ -97,4 +96,4 @@ additionalContent: |
     * [Technical deep dive for Azure AD CBA](concept-certificate-based-authentication-technical-deep-dive.md)
     * [Limitations with Azure AD CBA](concept-certificate-based-authentication-limitations.md)
     * [How to configure Azure AD CBA](how-to-certificate-based-authentication.md)
-    * [Troubleshoot Azure AD CBA](troubleshoot-certificate-based-authentication.md)
+    * [Troubleshoot Azure AD CBA](troubleshoot-certificate-based-authentication.md)

articles/active-directory/authentication/concept-certificate-based-authentication-limitations.md

@@ -6,7 +6,7 @@ services: active-directory
 ms.service: active-directory
 ms.subservice: authentication
 ms.topic: how-to
-ms.date: 02/09/2022
+ms.date: 02/18/2022
 
 ms.author: justinha
 author: vimrang
@@ -50,5 +50,5 @@ The following scenarios aren't supported:
 - [Technical deep dive for Azure AD CBA](concept-certificate-based-authentication-technical-deep-dive.md)   
 - [How to configure Azure AD CBA](how-to-certificate-based-authentication.md)
 - [FAQ](certificate-based-authentication-faq.yml)
-- [Troubleshoot AZure AD CBA](troubleshoot-certificate-based-authentication.md)
+- [Troubleshoot Azure AD CBA](troubleshoot-certificate-based-authentication.md)
 

articles/active-directory/authentication/concept-certificate-based-authentication-technical-deep-dive.md

@@ -49,7 +49,7 @@ Let's cover each step:
 
    :::image type="content" border="true" source="./media/concept-certificate-based-authentication-technical-deep-dive/sign-in-alt.png" alt-text="Screenshot of the Sign-in if FIDO2 is also enabled.":::
 
-1. After the user clicks the link, the client is redirected to the certauth endpoint, which is [http://certauth.login.microsoftonline.com](http://certauth.login.microsoftonline.com) for Azure Global. For [Azure Government](/azure-government/compare-azure-government-global-azure.md#guidance-for-developers), the certauth endpoint is [http://certauth.login.microsoftonline.us](http://certauth.login.microsoftonline.us). For the correct endpoint for other environments, see the specific Microsoft cloud docs. 
+1. After the user clicks the link, the client is redirected to the certauth endpoint, which is [https://certauth.login.microsoftonline.com](https://certauth.login.microsoftonline.com) for Azure Global. For [Azure Government](/azure-government/compare-azure-government-global-azure.md#guidance-for-developers), the certauth endpoint is [https://certauth.login.microsoftonline.us](https://certauth.login.microsoftonline.us). For the correct endpoint for other environments, see the specific Microsoft cloud docs. 
 
    The endpoint performs mutual authentication and requests the client certificate as part of the TLS handshake. You will see an entry for this request in the Sign-in logs. There is a [known issue](#known-issues) where User ID is displayed instead of Username.
 

articles/active-directory/authentication/how-to-certificate-based-authentication.md

@@ -6,7 +6,7 @@ services: active-directory
 ms.service: active-directory
 ms.subservice: authentication
 ms.topic: how-to
-ms.date: 02/09/2022
+ms.date: 02/18/2022
 
 ms.author: justinha
 author: justinha
@@ -251,7 +251,7 @@ Let's walk through a scenario where we will validate strong authentication by cr
 1. Because policy OID rule takes precedence over issuer rule, the certificate will satisfy multifactor authentication.
 1. The conditional access policy for the user requires MFA and the certificate satisfies multifactor, so the user will be authenticated into the application.
 
-### Enable Azure AD CBA using Microsoft Graph API
+## Enable Azure AD CBA using Microsoft Graph API
 
 To enable the certificate-based authentication and configure username bindings using Graph API, complete the following steps.
 
@@ -260,7 +260,7 @@ To enable the certificate-based authentication and configure username bindings u
 
 1. Go to [Microsoft Graph Explorer](https://developer.microsoft.com/graph/graph-explorer).
 1. Click **Sign into Graph Explorer** and sign in to your tenant.
-1. Follow the steps to [consent to the _Policy.ReadWrite.AuthenticationMethod_ delegated permission](/graph/graph-explorer/graph-explorer-features.md#consent-to-permissions).
+1. Follow the steps to [consent to the _Policy.ReadWrite.AuthenticationMethod_ delegated permission](/graph/graph-explorer/graph-explorer-features#consent-to-permissions).
 1. GET all authentication methods:
 
    ```http
@@ -270,7 +270,7 @@ To enable the certificate-based authentication and configure username bindings u
 1. GET the configuration for the x509Certificate authentication method:
 
    ```http
-   GET https://graph.microsoft.com/beta/policies/authenticationmethodspolicy/authenticationMetHodConfigurations/X509Certificate
+   GET https://graph.microsoft.com/beta/policies/authenticationmethodspolicy/authenticationMethodConfigurations/X509Certificate
    ```
 
 1. By default, the x509Certificate authentication method is disabled. To allow users to sign in with a certificate, you must enable the authentication method and configure the authentication and username binding policies through an update operation. To update policy, run a PATCH request.
@@ -331,4 +331,4 @@ To enable the certificate-based authentication and configure username bindings u
 - [Technical deep dive for Azure AD CBA](concept-certificate-based-authentication-technical-deep-dive.md)   
 - [Limitations with Azure AD CBA](concept-certificate-based-authentication-limitations.md)
 - [FAQ](certificate-based-authentication-faq.yml)
-- [Troubleshoot Azure AD CBA](troubleshoot-certificate-based-authentication.md)
+- [Troubleshoot Azure AD CBA](troubleshoot-certificate-based-authentication.md)

articles/active-directory/authentication/howto-authentication-passwordless-security-key-on-premises.md

@@ -17,7 +17,7 @@ ms.collection: M365-identity-device-management
 ---
 # Enable passwordless security key sign-in to on-premises resources by using Azure AD 
 
-This document discusses how to enable passwordless authentication to on-premises resources for environments with both *Azure Active Directory (Azure AD)-joined* and *hybrid Azure AD-joined* Windows 10 devices. This passwordless authentication functionality provides seamless single sign-on (SSO) to on-premises resources when you use Microsoft-compatible security keys.
+This document discusses how to enable passwordless authentication to on-premises resources for environments with both *Azure Active Directory (Azure AD)-joined* and *hybrid Azure AD-joined* Windows 10 devices. This passwordless authentication functionality provides seamless single sign-on (SSO) to on-premises resources when you use Microsoft-compatible security keys, or with [Windows Hello for Business Cloud trust](/windows/security/identity-protection/hello-for-business/hello-hybrid-cloud-trust.md)
 
 ## Use SSO to sign in to on-premises resources by using FIDO2 keys
 
@@ -44,11 +44,6 @@ You must also meet the following system requirements:
 
 - Devices must be running Windows 10 version 2004 or later.
 
-- You must be running [Azure AD Connect version 1.4.32.0 or later](../hybrid/how-to-connect-install-roadmap.md#install-azure-ad-connect).
-  - For more information about the available Azure AD hybrid authentication options, see the following articles:
-    - [Choose the right authentication method for your Azure AD hybrid identity solution](../hybrid/choose-ad-authn.md)
-    - [Select which installation type to use for Azure AD Connect](../hybrid/how-to-connect-install-select-installation.md)
-
 - Your Windows Server domain controllers must have patches installed for the following servers:
     - [Windows Server 2016](https://support.microsoft.com/help/4534307/windows-10-update-kb4534307)
     - [Windows Server 2019](https://support.microsoft.com/help/4534321/windows-10-update-kb4534321)

articles/active-directory/authentication/howto-password-ban-bad-on-premises-faq.yml

@@ -6,14 +6,13 @@ metadata:
   services: active-directory
   ms.service: active-directory
   ms.subservice: authentication
-  ms.topic: how-to
+  ms.topic: faq
   ms.date: 11/21/2019
   ms.author: justinha
   author: justinha
   manager: karenhoran
   ms.reviewer: jsimmons
   ms.collection: M365-identity-device-management
-    
 title: Azure AD Password Protection on-premises frequently asked questions
 summary: This section provides answers to many commonly asked questions about Azure AD Password Protection.
 
@@ -318,4 +317,4 @@ additionalContent: |
   ## Next steps
   If you have an on-premises Azure AD Password Protection question that isn't answered here, submit a Feedback item below - thank you!
           
-  [Deploy Azure AD password protection](howto-password-ban-bad-on-premises-deploy.md)
+  [Deploy Azure AD password protection](howto-password-ban-bad-on-premises-deploy.md)