Merging changes synced from https://github.com/MicrosoftDocs/azure-docs-pr (branch live)

Author: Banani-Rath

articles/active-directory/develop/app-registrations-training-guide.md

@@ -24,7 +24,7 @@ ms.collection: M365-identity-device-management
 
 You can find numerous improvements in the new [App registrations](https://go.microsoft.com/fwlink/?linkid=2083908) experience in the Azure portal. If you're more familiar with the legacy experience, use this training guide to get you started using the new experience.
 
-In Azure Active Directory, the new application registration experience described here generally available (GA). In Azure Active Directory B2C (Azure AD B2C), this experience is in preview.
+In Azure Active Directory, the new application registration experience described here is generally available (GA). In Azure Active Directory B2C (Azure AD B2C), this experience is in preview.
 
 ## Key changes
 

articles/active-directory/manage-apps/toc.yml

@@ -5,7 +5,7 @@
     items:
      - name: What is cloud app management and single sign-on?
        href: what-is-application-management.md
-     - name: What is automatic user provisioning?
+     - name: What is application provisioning?
        href: user-provisioning.md
      - name: What is Application Proxy for on-premises apps?
        href: what-is-application-proxy.md
@@ -17,7 +17,7 @@
       href: view-applications-portal.md
   - name: Tutorials
     items:
-    - name: SaaS apps tutorials
+    - name: Integrated gallery apps (e.g. ServiceNow, Salesforce, Dropbox)
       href: /azure/active-directory/saas-apps/
     - name: Add an on-premises app with Application Proxy
       href: application-proxy-add-on-premises-application.md
@@ -66,12 +66,12 @@
           href: howto-saml-token-encryption.md
         - name: End-user portals
           href: end-user-experiences.md
-    - name: Automatic user provisioning
+    - name: Application provisioning (SCIM)
       items:
-       - name: Plan an automatic user provisioning deployment
-         href: plan-auto-user-provisioning.md
        - name: Automatic provisioning for SCIM-enabled apps
          href: use-scim-to-provision-users-and-groups.md
+       - name: Plan an automatic user provisioning deployment
+         href: plan-auto-user-provisioning.md
     - name: Application Proxy for on-premises apps
       items:
        - name: Application Proxy
@@ -223,23 +223,21 @@
             href: access-panel-extension-problem-installing.md
           - name: Error using self-service app access
             href: access-panel-troubleshoot-self-service-access.md
-    - name: Automatic user provisioning
+    - name: Application provisioning (SCIM)
       items:
       - name: Configure user provisioning
         items:
-        - name: User provisioning for gallery apps
+        - name: Manual vs. automatic provisioning 
           href: application-provisioning-config-how-to.md
-        - name: Enable automatic user provisioning for multi-tenant apps
-          href: isv-automatic-provisioning-multi-tenant-apps.md
         - name: Configure automatic user provisioning
           href: configure-automatic-user-provisioning-portal.md
-        - name: Customize application attributes
+        - name: Customize attribute mappings
           href: Customize-application-attributes.md
-        - name: Scoping filters
+        - name: Scoping users or groups to be provisioned 
           href: define-conditional-rules-for-provisioning-user-accounts.md
         - name: Skip deletion for out-of-scope users
           href: skip-out-of-scope-deletions.md
-        - name: Check provisioning status
+        - name: Monitor provisioning status and performance
           href: application-provisioning-when-will-provisioning-finish-specific-user.md
         - name: Report on automatic user provisioning
           href: check-status-user-account-provisioning.md
@@ -249,20 +247,20 @@
         items:
         - name: Troubleshoot user provisioning
           href: application-provisioning-config-problem.md
-        - name: Quarantine status
-          href: application-provisioning-quarantine-status.md
-        - name: Provisioning logs
-          href: /azure/active-directory/reports-monitoring/concept-provisioning-logs?context=azure/active-directory/manage-apps/context/manage-apps-context
-        - name: Sync an attribute for mapping - gallery app
-          href: user-provisioning-sync-attributes-for-mapping.md
-        - name: Taking hours - gallery app
-          href: application-provisioning-when-will-provisioning-finish.md
-        - name: Problem saving administrator credentials while configuring user provisioning gallery app
+        - name: Authorization issue (unable to save admin credentials)
           href: application-provisioning-config-problem-storage-limit.md
-        - name: Users are not provisioned - gallery app
+        - name: Users are not provisioned 
           href: application-provisioning-config-problem-no-users-provisioned.md
-        - name: Wrong users provisioned - gallery app
+        - name: Wrong users provisioned
           href: application-provisioning-config-problem-wrong-users-provisioned.md
+        - name: Provisioning job in quarantine
+          href: application-provisioning-quarantine-status.md
+        - name: Missing source attribute
+          href: user-provisioning-sync-attributes-for-mapping.md
+        - name: Provisioning job is slow
+          href: application-provisioning-when-will-provisioning-finish.md
+        - name: Provisioning logs
+          href: /azure/active-directory/reports-monitoring/concept-provisioning-logs?context=azure/active-directory/manage-apps/context/manage-apps-context
     - name: Application Proxy for on-premises apps
       items:
       - name: Configure connectors
@@ -357,10 +355,13 @@
           href: application-proxy-understand-cors-issues.md
   - name: Reference
     items:
-    - name: Automatic user provisioning
+    - name: Application provisioning (SCIM)
       items:
         - name: Write expressions for attribute mappings
           href: functions-for-customizing-application-data.md
+        - name: Choosing a provisioning method
+          href: isv-automatic-provisioning-multi-tenant-apps.md
+
     - name: Azure AD Connect Provisioning Agent
       items:
        - name: Provisioning Agent version history

articles/active-directory/reports-monitoring/concept-provisioning-logs.md

@@ -14,7 +14,7 @@ ms.topic: conceptual
 ms.tgt_pltfrm: na
 ms.workload: identity
 ms.subservice: report-monitor
-ms.date: 07/29/2019
+ms.date: 11/04/2019
 ms.author: markvi
 ms.reviewer: arvinh
 
@@ -208,6 +208,20 @@ The **summary** tab provides an overview of what happened and identifiers for th
 |---|---|
 |Conflict, EntryConflict|Correct the conflicting attribute values in either Azure AD or the application, or review your matching attribute configuration if the conflicting user account was supposed to be matched and taken over. Review the following [documentation](https://docs.microsoft.com/azure/active-directory/manage-apps/customize-application-attributes) for more information on configuring matching attributes.|
 |TooManyRequests|The target app rejected this attempt to update the user because it is overloaded and receiving too many requests. There is nothing to do. This attempt will automatically be retired. Microsoft has also been notified of this issue.|
+|InternalServerError |The target app returned an unexpected error. There may be a service issue with the target application that is preventing this from working. This attempt will automatically be retired in 40 minutes.|
+|InsufficientRights, MethodNotAllowed, NotPermitted, Unauthorized| Azure AD was able to authenticate with the target application, but was not authorized to perform the update. Please review any instructions provided by the target application as well as the respective application [tutorial](https://docs.microsoft.com/azure/active-directory/saas-apps/tutorial-list).|
+|UnprocessableEntity|The target application returned an unexpected response. The configuration of the target application may not be correct, or there may be a service issue with the target application that is preventing this from working.|
+|WebExceptionProtocolError |An HTTP protocol error occurred while connecting to the target application. There is nothing to do. This attempt will automatically be retired in 40 minutes.|
+|InvalidAnchor|A user that was previously created or matched by the provisioning service no longer exists. Check to ensure the user exists. To force a re-match of all users, use the MS Graph API to [restart job](https://docs.microsoft.com/graph/api/synchronization-synchronizationjob-restart?view=graph-rest-beta&tabs=http). Note that restarting provisioning will trigger an initial cycle, which can take time to complete. It also deletes the cache the provisioning service uses to operate, meaning that all users and groups in the tenant will have to be evaluated again and certain provisioning events could be dropped.|
+|NotImplemented | The target app returned an unexpected response. The configuration of the app may not be correct, or there may be a service issue with the target app that is preventing this from working. Please review any instructions provided by the target application as well as the respective application [tutorial](https://docs.microsoft.com/azure/active-directory/saas-apps/tutorial-list). |
+|MandatoryFieldsMissing, MissingValues |The user could not be created because required values are missing. Correct the missing attribute values in the source record, or review your matching attribute configuration to ensure the required fields are not omitted. [Learn more](https://docs.microsoft.com/azure/active-directory/manage-apps/customize-application-attributes) about configuring matching attributes.|
+|SchemaAttributeNotFound |Could not perform the operation because an attribute was specified that does not exist in the target application. See the [documentation](https://docs.microsoft.com/azure/active-directory/manage-apps/customize-application-attributes) on attribute customization and ensure your configuration is correct.|
+|InternalError |An internal service error occurred within the Azure AD provisioning service. There is nothing to do. This attempt will automatically be retried in 40 minutes.|
+|InvalidDomain |The operation could not be performed due to an attribute value containing an invalid domain name. Update the domain name on the user or add it to the permitted list in the target application. |
+|Timeout |The operation could not be completed because the target application took too long to respond. There is nothing to do. This attempt will automatically be retried in 40 minutes.|
+|LicenseLimitExceeded|The user could not be created in the target application because there are no available licenses for this user. Either procure additional licenses for the target application, or review your user assignments and attribute mapping configuration to ensure that the correct users are assigned with the correct attributes.|
+|DuplicateTargetEntries  |The operation could not be completed because more than one user in the target application was found with the configured matching attributes. Either remove the duplicate user from the target application, or reconfigure your attribute mappings as described [here](https://docs.microsoft.com/azure/active-directory/manage-apps/customize-application-attributes).|
+|DuplicateSourceEntries | The operation could not be completed because more than one user was found with the configured matching attributes. Either remove the duplicate user, or reconfigure your attribute mappings as described [here](https://docs.microsoft.com/azure/active-directory/manage-apps/customize-application-attributes).|
 
 ## Next steps
 

articles/ansible/ansible-azure-hdinsight-configure.md

@@ -1,6 +1,6 @@
 ---
 title: Tutorial - Configure a cluster in Azure HDInsight using Ansible
-description: Learn how to use Ansible to create and resize an Azure HDInsight
+description: Learn how to use Ansible to configure, resize, and delete an Azure HDInsight cluster
 keywords: ansible, azure, devops, bash, playbook, apache hadoop, hdinsight
 ms.topic: tutorial
 ms.service: ansible

articles/ansible/ansible-create-configure-aks.md

@@ -7,7 +7,7 @@ ms.service: ansible
 author: tomarchermsft
 manager: jeconnoc
 ms.author: tarcher
-ms.date: 04/30/2019
+ms.date: 11/04/2019
 ---
 
 # Tutorial: Configure Azure Kubernetes Service (AKS) clusters in Azure using Ansible
@@ -49,7 +49,8 @@ Save the following playbook as `azure_create_aks.yml`:
     ssh_key: "your_ssh_key"
     client_id: "your_client_id"
     client_secret: "your_client_secret"
-  tasks:
+    aks_version: aks_version
+tasks:
   - name: Create resource group
     azure_rm_resourcegroup:
       name: "{{ resource_group }}"
@@ -60,6 +61,7 @@ Save the following playbook as `azure_create_aks.yml`:
       location: "{{ location }}"
       resource_group: "{{ resource_group }}"
       dns_prefix: "{{ aks_name }}"
+      kubernetes_version: "{{aks_version}}"
       linux_profile:
         admin_username: "{{ username }}"
         ssh_key: "{{ ssh_key }}"
@@ -79,6 +81,7 @@ Before running the playbook, see the following notes:
 - The first section within `tasks` defines a resource group named `myResourceGroup` within the `eastus` location.
 - The second section within `tasks` defines an AKS cluster named `myAKSCluster` within the `myResourceGroup` resource group.
 - For the `your_ssh_key` placeholder, enter your RSA public key in the single-line format - starting with "ssh-rsa" (without the quotes).
+- For the `aks_version` placeholder, use the [az aks get-versions](/cli/azure/aks?view=azure-cli-latest#az-aks-get-versions) command.
 
 Run the playbook using the `ansible-playbook` command:
 

articles/ansible/ansible-create-configure-route-table.md

@@ -1,6 +1,6 @@
 ---
 title: Tutorial - Configure Azure route tables using Ansible
-description: Learn how to create, change, and delete Azure route tables using Ansible
+description: Learn how to create, manage, and delete Azure route tables using Ansible. Also learn how to create and delete routes.
 keywords: ansible, azure, devops, bash, playbook, networking, route, route table
 ms.topic: tutorial
 ms.service: ansible

articles/ansible/ansible-data-cache-for-redis-configure.md

@@ -1,6 +1,6 @@
 ---
 title: Tutorial - Configure caches in Azure Cache for Redis using Ansible
-description: Learn how to use Ansible to create, scale and, reboot Azure Cache for Redis
+description: Learn how to use Ansible to create, scale, reboot, and add a firewall rule to Azure Cache for Redis
 keywords: ansible, azure, devops, bash, playbook, cache, redis
 ms.topic: tutorial
 ms.service: ansible