Merge pull request #48911 from MicrosoftDocs/master

8/13 PM Publish

Author: huypub

articles/active-directory/active-directory-enterprise-app-role-management.md

@@ -13,7 +13,7 @@ ms.workload: identity
 ms.tgt_pltfrm: na
 ms.devlang: na
 ms.topic: article
-ms.date: 07/09/2018
+ms.date: 08/10/2018
 ms.author: jeedes
 ms.custom: aaddev
 
@@ -64,6 +64,9 @@ If your application expects custom roles to be passed in a SAML response, you ne
 
 	  ![List of permissions and "Modify Permissions" button](./media/active-directory-enterprise-app-role-management/graph-explorer-new10.png)
 
+	> [!Note]
+	> Cloud App Administrator and App Administrator role will not work in this scenario as we need the Global Admin permissions for Directory Read and Write.
+
     d. Accept the consent. You're logged in to the system again.
 
     e. Change the version to **beta**, and fetch the list of service principals from your tenant by using the following query:

articles/active-directory/develop/vs-active-directory-add-connected-service.md

@@ -7,7 +7,7 @@ manager: douge
 ms.assetid: f599de6b-e369-436f-9cdc-48a0165684cb
 ms.prod: visual-studio-dev15
 ms.technology: vs-azure
-ms.workload: azure
+ms.workload: azure-vs
 ms.devlang: multiple
 ms.topic: conceptual
 ms.date: 03/12/2018

articles/active-directory/develop/vs-active-directory-dotnet-getting-started.md

@@ -7,7 +7,7 @@ manager: douge
 ms.assetid: 1c8b6a58-5144-4965-a905-625b9ee7b22b
 ms.prod: visual-studio-dev15
 ms.technology: vs-azure
-ms.workload: azure
+ms.workload: azure-vs
 ms.topic: conceptual
 ms.date: 03/12/2018
 ms.author: ghogen

articles/active-directory/develop/vs-active-directory-dotnet-what-happened.md

@@ -7,7 +7,7 @@ manager: douge
 ms.assetid: 8b24adde-547e-4ffe-824a-2029ba210216
 ms.prod: visual-studio-dev15
 ms.technology: vs-azure
-ms.workload: azure
+ms.workload: azure-vs
 ms.topic: conceptual
 ms.date: 03/12/2018
 ms.author: ghogen

articles/active-directory/develop/vs-active-directory-error.md

@@ -7,7 +7,7 @@ manager: douge
 ms.assetid: dd89ea63-4e45-4da1-9642-645b9309670a
 ms.prod: visual-studio-dev15
 ms.technology: vs-azure
-ms.workload: azure
+ms.workload: azure-vs
 ms.topic: conceptual
 ms.date: 03/12/2018
 ms.author: ghogen

articles/active-directory/develop/vs-active-directory-webapi-getting-started.md

@@ -7,7 +7,7 @@ manager: douge
 ms.assetid: bf1eb32d-25cd-4abf-8679-2ead299fedaa
 ms.prod: visual-studio-dev15
 ms.technology: vs-azure
-ms.workload: azure
+ms.workload: azure-vs
 ms.topic: conceptual
 ms.date: 03/12/2018
 ms.author: ghogen

articles/active-directory/develop/vs-active-directory-webapi-what-happened.md

@@ -7,7 +7,7 @@ manager: douge
 ms.assetid: 57630aee-26a2-4326-9dbb-ea2a66daa8b0
 ms.prod: visual-studio-dev15
 ms.technology: vs-azure
-ms.workload: azure
+ms.workload: azure-vs
 ms.topic: conceptual
 ms.date: 03/12/2018
 ms.author: ghogen

articles/active-directory/saas-apps/envoy-tutorial.md

@@ -107,7 +107,7 @@ In this section, you enable Azure AD single sign-on in the Azure portal and conf
 
 	![Envoy Domain and URLs single sign-on information](./media/envoy-tutorial/tutorial_envoy_url.png)
 
-    In the **Sign-on URL** textbox, type a URL using the following pattern: `https://<tenant-name>.Envoy.com`
+    In the **Sign-on URL** textbox, type a URL using the following pattern: `https://app.envoy.com/a/saml/auth/<company-ID-from-Envoy>`
 
 	> [!NOTE] 
 	> This value is not real. Update this value with the actual Sign-On URL. Contact [Envoy Client support team](https://envoy.com/contact/) to get this value.