Fixes link.

Ken Withee · Ken Withee · commit 0e4a2733c89e · 2023-09-15T10:54:22.000-07:00
diff --git a/articles/active-directory/app-proxy/app-proxy-protect-ndes.md b/articles/active-directory/app-proxy/app-proxy-protect-ndes.md
@@ -28,7 +28,7 @@ Azure AD Application Proxy is built on Azure. It gives you a massive amount of n
 
 [!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.md#application-administrator).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference).md#application-administrator).
 1. Select your username in the upper-right corner. Verify you're signed in to a directory that uses Application Proxy. If you need to change directories, select **Switch directory** and choose a directory that uses Application Proxy.
 1. Browse to **Identity** > **Applications** > **Enterprise applications** > **Application proxy**.
 1. Select **Download connector service**.
diff --git a/articles/active-directory/app-proxy/application-proxy-add-on-premises-application.md b/articles/active-directory/app-proxy/application-proxy-add-on-premises-application.md
@@ -153,7 +153,7 @@ To use Application Proxy, install a connector on each Windows server you're usin
 
 To install the connector:
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.md#application-administrator).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference).md#application-administrator).
 1. Select your username in the upper-right corner. Verify you're signed in to a directory that uses Application Proxy. If you need to change directories, select **Switch directory** and choose a directory that uses Application Proxy.
 1. Browse to **Identity** > **Applications** > **Enterprise applications** > **Application proxy**.
 1. Select **Download connector service**.
@@ -186,7 +186,7 @@ You can use the Microsoft Entra admin center or your Windows server to confirm t
 
 To confirm the connector installed and registered correctly:
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.md#application-administrator).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference).md#application-administrator).
 1. Select your username in the upper-right corner. Verify you're signed in to a directory that uses Application Proxy. If you need to change directories, select **Switch directory** and choose a directory that uses Application Proxy.
 1. Browse to **Identity** > **Applications** > **Enterprise applications** > **Application proxy**.
 1. View a connector to verify its details. The connectors should be expanded by default. If the connector you want to view isn't expanded, expand the connector to view the details. An active green label indicates that your connector can connect to the service. However, even though the label is green, a network issue could still block the connector from receiving messages.
@@ -211,7 +211,7 @@ To confirm the connector installed and registered correctly:
 ## Add an on-premises app to Azure AD
 
 Now that you've prepared your environment and installed a connector, you're ready to add on-premises applications to Azure AD.
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.md#application-administrator).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference).md#application-administrator).
 1. Browse to **Identity** > **Applications** > **Enterprise applications**.
 1. Select **New application**.
 1. Select **Add an on-premises application** button, which appears about halfway down the page in the **On-premises applications** section. Alternatively, you can select **Create your own application** at the top of the page and then select **Configure Application Proxy for secure remote access to an on-premises application**.
diff --git a/articles/active-directory/app-proxy/application-proxy-config-sso-how-to.md b/articles/active-directory/app-proxy/application-proxy-config-sso-how-to.md
@@ -20,7 +20,7 @@ Single sign-on (SSO) allows your users to access an application without authenti
 ## How to configure single-sign on
 To configure SSO, first make sure that your application is configured for Pre-Authentication through Azure Active Directory.
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.md#application-administrator).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference).md#application-administrator).
 1. Select your username in the upper-right corner. Verify you're signed in to a directory that uses Application Proxy. If you need to change directories, select **Switch directory** and choose a directory that uses Application Proxy.
 1. Browse to **Identity** > **Applications** > **Enterprise applications** > **Application proxy**.
 
diff --git a/articles/active-directory/app-proxy/application-proxy-configure-cookie-settings.md b/articles/active-directory/app-proxy/application-proxy-configure-cookie-settings.md
@@ -46,7 +46,7 @@ Additionally, if your back-end application has cookies that need to be available
 
 To set the cookie settings using the Microsoft Entra admin center:
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.md#application-administrator).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference).md#application-administrator).
 1. Browse to **Identity** > **Applications** > **Enterprise applications** > **Application proxy**.
 5. Under **Additional Settings**, set the cookie setting to **Yes** or **No**.
 6. Click **Save** to apply your changes. 
diff --git a/articles/active-directory/app-proxy/application-proxy-configure-custom-domain.md b/articles/active-directory/app-proxy/application-proxy-configure-custom-domain.md
@@ -59,7 +59,7 @@ To configure an on-premises app to use a custom domain, you need a verified Azur
 ### Create and verify a custom domain
 
 To create and verify a custom domain:
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference).
 1. Browse to **Identity** > **Settings** > **Domain names**.
 1. Select **Add custom domain**. 
 1. Enter your custom domain name and select **Add Domain**. 
diff --git a/articles/active-directory/app-proxy/application-proxy-configure-custom-home-page.md b/articles/active-directory/app-proxy/application-proxy-configure-custom-home-page.md
@@ -46,7 +46,7 @@ You can set the home page URL either through the Microsoft Entra admin center or
 [!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
 
 To change the home page URL of your app through the Microsoft Entra admin center, follow these steps:
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference).
 1. Select your username in the upper-right corner. Verify you're signed in to a directory that uses 
 1. Browse to **Identity** > **Applications** > **App registrations**. The list of registered apps appears.
 1. Choose your app from the list. A page showing the details of the registered app appears.
diff --git a/articles/active-directory/app-proxy/application-proxy-configure-hard-coded-link-translation.md b/articles/active-directory/app-proxy/application-proxy-configure-hard-coded-link-translation.md
@@ -130,7 +130,7 @@ If you need to support one of these two scenarios, use the same internal and ext
 [!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
 
 Getting started with link translation is as easy as clicking a button:
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference).
 1. Browse to **Identity** > **Applications** > **Enterprise applications** > **All applications**.
 1. Select the app you want to manage.
 1. Turn **Translate URLs in application body** to **Yes**.
diff --git a/articles/active-directory/app-proxy/application-proxy-configure-native-client-application.md b/articles/active-directory/app-proxy/application-proxy-configure-native-client-application.md
@@ -35,7 +35,7 @@ Publish your proxy application as you would any other application and assign use
 [!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
 
 You now need to register your application in Azure AD, as follows:
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.md#application-administrator).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference).md#application-administrator).
 1. Select your username in the upper-right corner. Verify you're signed in to a directory that uses Application Proxy. If you need to change directories, select **Switch directory** and choose a directory that uses Application Proxy.
 1. Browse to **Identity** > **Applications** > **App registrations**. The list of all app registrations appears.
 1. Select **New registration**. The **Register an application** page appears.
diff --git a/articles/active-directory/app-proxy/application-proxy-configure-single-sign-on-password-vaulting.md b/articles/active-directory/app-proxy/application-proxy-configure-single-sign-on-password-vaulting.md
@@ -25,7 +25,7 @@ You should already have published and tested your app with Application Proxy. If
 
 [!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.md#application-administrator).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference).md#application-administrator).
 1. Browse to **Identity** > **Applications** > **Enterprise applications** > **All applications**.
 1. From the list, select the app that you want to set up with SSO.  
 1. Select **Application Proxy**. 
diff --git a/articles/active-directory/app-proxy/application-proxy-connector-groups.md b/articles/active-directory/app-proxy/application-proxy-connector-groups.md
@@ -31,7 +31,7 @@ To group your connectors, you have to make sure you [installed multiple connecto
 ## Create connector groups
 
 Use these steps to create as many connector groups as you want.
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference).
 1. Browse to **Identity** > **Applications** > **Enterprise applications** > **Application proxy**.
 1. Select **New connector group**. The New Connector Group blade appears.
 
diff --git a/articles/active-directory/app-proxy/application-proxy-deployment-plan.md b/articles/active-directory/app-proxy/application-proxy-deployment-plan.md
@@ -269,7 +269,7 @@ The following capabilities can be used to support Azure AD Application Proxy:
 
 ### Required roles
 
-Microsoft advocates the principle of granting the least possible privilege to perform needed tasks with Azure AD. [Review the different Azure roles that are available](../roles/permissions-reference.md) and choose the right one to address the needs of each persona. Some roles may need to be applied temporarily and removed after the deployment is completed.
+Microsoft advocates the principle of granting the least possible privilege to perform needed tasks with Azure AD. [Review the different Azure roles that are available](../roles/permissions-reference).md) and choose the right one to address the needs of each persona. Some roles may need to be applied temporarily and removed after the deployment is completed.
 
 | Business role| Business tasks| Azure AD roles |
 |---|---|---|
diff --git a/articles/active-directory/app-proxy/application-proxy-integrate-with-logic-apps.md b/articles/active-directory/app-proxy/application-proxy-integrate-with-logic-apps.md
@@ -47,7 +47,7 @@ To follow this tutorial, you will need:
 
 When a new Enterprise Application is created, a matching App Registration is also created. The App Registration allows configuration of secure programmatic access using certificates, secrets, or federated credentials. For integration with a Logic App, we will need to configure a client secret key, and configure the API permissions.
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference).
 
 1. Browse to **Identity** > **Applications** > **App registrations**.
 
diff --git a/articles/active-directory/app-proxy/application-proxy-integrate-with-tableau.md b/articles/active-directory/app-proxy/application-proxy-integrate-with-tableau.md
@@ -45,7 +45,7 @@ For:
 **To publish your app**: 
 
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference).
 
 1. Browse to **Identity** > **Applications** > **Enterprise applications**.
 
diff --git a/articles/active-directory/app-proxy/application-proxy-network-topology.md b/articles/active-directory/app-proxy/application-proxy-network-topology.md
@@ -40,7 +40,7 @@ In order to optimize the traffic flow and reduce latency to a connector group as
 > [!IMPORTANT]
 > Connectors must be using at least version 1.5.1975.0 to use this capability.
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.md#application-administrator).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference).md#application-administrator).
 1. Select your username in the upper-right corner. Verify you're signed in to a directory that uses Application Proxy. If you need to change directories, select **Switch directory** and choose a directory that uses Application Proxy.
 1. Browse to **Identity** > **Applications** > **Enterprise applications** > **Application proxy**.
 1. Select **New Connector Group**, provide a **Name** for the connector group.
diff --git a/articles/active-directory/app-proxy/application-proxy-ping-access-publishing-guide.md b/articles/active-directory/app-proxy/application-proxy-ping-access-publishing-guide.md
@@ -44,7 +44,7 @@ If you've enabled Application Proxy and installed a connector already, you can s
 
 The Application Proxy connector is a Windows Server service that directs the traffic from your remote employees to your published applications. For more detailed installation instructions, see [Tutorial: Add an on-premises application for remote access through Application Proxy in Azure Active Directory](../app-proxy/application-proxy-add-on-premises-application.md).
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference).
 1. Browse to **Identity** > **Applications** > **Enterprise applications** > **Application proxy**.
 1. Select **Download connector service**. The **Application Proxy Connector Download** page appears.
 
@@ -159,7 +159,7 @@ To collect this information:
 
 **Update the `acceptMappedClaims` field:**
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.md#application-administrator).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference).md#application-administrator).
 1. Select your username in the upper-right corner. Verify you're signed in to a directory that uses Application Proxy. If you need to change directories, select **Switch directory** and choose a directory that uses Application Proxy.
 1. Browse to **Identity** > **Applications** > **App registrations** and select your application.
 1. From the sidebar of the **App registrations** page for your application, select **Manifest**. The manifest JSON code for your application's registration appears.
diff --git a/articles/active-directory/app-proxy/application-proxy-qlik.md b/articles/active-directory/app-proxy/application-proxy-qlik.md
@@ -31,7 +31,7 @@ To publish QlikSense, you will need to publish two applications in Azure.
 Follow these steps to publish your app. For a more detailed walkthrough of steps 1-8, see [Publish applications using Azure AD Application Proxy](../app-proxy/application-proxy-add-on-premises-application.md). 
 
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference).
 1. Browse to **Identity** > **Applications** > **Enterprise applications**.
 3. Select **New application** at the top of the blade. 
 4. Select **On-premises application**. 
diff --git a/articles/active-directory/app-proxy/application-proxy-secure-api-access.md b/articles/active-directory/app-proxy/application-proxy-secure-api-access.md
@@ -48,7 +48,7 @@ To publish the SecretAPI web API through Application Proxy:
 
 1. Build and publish the sample SecretAPI project as an ASP.NET web app on your local computer or intranet. Make sure you can access the web app locally.
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference).
 
 1. Browse to **Identity** > **Applications** > **Enterprise applications**.
 
@@ -100,7 +100,7 @@ You've published your web API through Azure AD Application Proxy. Now, add users
 Native apps are programs developed to use on a particular platform or device. Before your native app can connect and access an API, you must register it in Azure AD. The following steps show how to register a native app and give it access to the web API you published through Application Proxy.
 
 To register the AppProxyNativeAppSample native app:
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference).
 
 1. Browse to **Identity** > **Applications** > **Enterprise applications** > **App registrations**.
 
diff --git a/articles/active-directory/app-proxy/application-proxy-sign-in-bad-gateway-timeout-error.md b/articles/active-directory/app-proxy/application-proxy-sign-in-bad-gateway-timeout-error.md
@@ -59,7 +59,7 @@ As a first quick step, double check and fix the internal URL by opening the appl
 ## Check the application is assigned to a working Connector Group
 
 To verify the application is assigned to a working Connector Group:
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.md#application-administrator).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference).md#application-administrator).
 1. Browse to **Identity** > **Applications** > **Enterprise applications** > **Application proxy**.
 1. Look at the Connector Group field. If there are no active connectors in the group, you see a warning. If you don't see any warnings, move on to verify all [required ports](application-proxy-add-on-premises-application.md) are allowed.
 1. If the wrong Connector Group is showing, use the drop-down to select the correct group, and confirm you no longer see any warnings. If the intended Connector Group is showing, click the warning message to open the page with Connector management.
