Merge pull request #183920 from MicrosoftDocs/master

Merge master to live, 4 AM

Author: v-ccolin

articles/active-directory-b2c/identity-provider-swissid.md

@@ -29,7 +29,7 @@ In this article, you learn how to provide sign-up and sign-in to customers with
 
 To enable sign-in for users with a SwissID account in Azure AD B2C, you need to create an application. To create SwissID application, follow these steps:
 
-1. Contact [SwissID Business Partner support](https://www.swissid.ch/en/b2b-kontakt.html).
+1. Contact [SwissID Business Partner support](https://www.swissid.ch/en/b2c-kontakt.html).
 1. After the sign up with SwissID, provide information about your Azure AD B2C tenant:
 
 

articles/active-directory-b2c/whats-new-docs.md

@@ -15,6 +15,30 @@ manager: CelesteDG
 
 Welcome to what's new in Azure Active Directory B2C documentation. This article lists new docs that have been added and those that have had significant updates in the last three months. To learn what's new with the B2C service, see [What's new in Azure Active Directory](../active-directory/fundamentals/whats-new.md).
 
+## December 2021
+
+### New articles
+
+- [TOTP display control](display-control-time-based-one-time-password.md)
+- [Set up sign-up and sign-in with a SwissID account using Azure Active Directory B2C](identity-provider-swissid.md)
+- [Set up sign-up and sign-in with a PingOne account using Azure Active Directory B2C](identity-provider-ping-one.md)
+- [Tutorial: Configure Haventec with Azure Active Directory B2C for single step, multifactor passwordless authentication](partner-haventec.md)
+- [Tutorial: Acquire an access token for calling a web API in Azure AD B2C](tutorial-acquire-access-token.md)
+- [Tutorial: Sign in and sign out users with Azure AD B2C in a Node.js web app](tutorial-authenticate-nodejs-web-app-msal.md)
+- [Tutorial: Call a web API protected with Azure AD B2C](tutorial-call-api-with-access-token.md)
+
+### Updated articles
+
+- [About claim resolvers in Azure Active Directory B2C custom policies](claim-resolver-overview.md)
+- [Azure Active Directory B2C service limits and restrictions](service-limits.md)
+- [Add Conditional Access to user flows in Azure Active Directory B2C](conditional-access-user-flow.md)
+- [Display controls](display-controls.md)
+- ['Azure AD B2C: Frequently asked questions (FAQ)'](faq.yml)
+- [Manage Azure AD B2C with Microsoft Graph](microsoft-graph-operations.md)
+- [Define an Azure AD MFA technical profile in an Azure AD B2C custom policy](multi-factor-auth-technical-profile.md)
+- [Enable multifactor authentication in Azure Active Directory B2C](multi-factor-authentication.md)
+- [String claims transformations](string-transformations.md)
+
 ## November 2021
 
 ### Updated articles

articles/active-directory/develop/whats-new-docs.md

@@ -6,7 +6,7 @@ services: active-directory
 author: mmacy
 manager: CelesteDG
 
-ms.date: 12/06/2021
+ms.date: 01/03/2022
 ms.service: active-directory
 ms.subservice: develop
 ms.topic: reference
@@ -19,6 +19,23 @@ ms.custom: has-adal-ref
 
 Welcome to what's new in the Microsoft identity platform documentation. This article lists new docs that have been added and those that have had significant updates in the last three months.
 
+## December 2021
+
+### New articles
+
+- [Build Zero Trust-ready apps using Microsoft identity platform features and tools](zero-trust-for-developers.md)
+- [Quickstart: Sign in users in single-page apps (SPA) using the auth code flow](single-page-app-quickstart.md)
+- [Run automated integration tests](test-automate-integration-testing.md)
+- [Secure identity in line-of-business application using Zero Trust principles](secure-line-of-business-apps.md)
+- [What are workload identities?](workload-identities-overview.md)
+
+### Updated articles
+
+- [Claims mapping policy type](reference-claims-mapping-policy-type.md)
+- [Microsoft identity platform developer glossary](developer-glossary.md)
+- [Quickstart: Sign in and get an access token in an Angular SPA using the auth code flow](quickstart-v2-javascript-auth-code-angular.md)
+- [Token cache serialization in MSAL.NET](msal-net-token-cache-serialization.md)
+
 ## November 2021
 
 ### Updated articles
@@ -51,25 +68,3 @@ Welcome to what's new in the Microsoft identity platform documentation. This art
 - [Microsoft Graph API](microsoft-graph-intro.md)
 - [Microsoft identity platform and the OAuth 2.0 client credentials flow](v2-oauth2-client-creds-grant-flow.md)
 - [What's new for authentication?](reference-breaking-changes.md)
-
-## September 2021
-
-### New articles
-
-- [Desktop app that calls web APIs: Acquire a token interactively](scenario-desktop-acquire-token-interactive.md)
-- [Desktop app that calls web APIs: Acquire a token using Device Code flow](scenario-desktop-acquire-token-device-code-flow.md)
-- [Desktop app that calls web APIs: Acquire a token using Integrated Windows Authentication](scenario-desktop-acquire-token-integrated-windows-authentication.md)
-- [Desktop app that calls web APIs: Acquire a token using Username and Password](scenario-desktop-acquire-token-username-password.md)
-- [Desktop app that calls web APIs: Acquire a token using WAM](scenario-desktop-acquire-token-wam.md)
-- [Implement role-based access control in apps](howto-implement-rbac-for-apps.md)
-- [Migrate public client applications from ADAL.NET to MSAL.NET](msal-net-migration-public-client.md)
-
-### Updated articles
-
-- [Enhance security with the principle of least privilege](secure-least-privileged-access.md)
-- [Migrate confidential client applications from ADAL.NET to MSAL.NET](msal-net-migration-confidential-client.md)
-- [Microsoft identity platform videos](identity-videos.md)
-- [National clouds](authentication-national-cloud.md)
-- [Shared device mode for Android devices](msal-android-shared-devices.md)
-- [Token cache serialization in MSAL.NET](msal-net-token-cache-serialization.md)
-- [Validation differences by supported account types (signInAudience)](supported-accounts-validation.md)

articles/active-directory/manage-apps/configure-risk-based-step-up-consent.md

@@ -23,7 +23,8 @@ For example, consent requests for newly registered multi-tenant apps that are no
 
 When a risky consent request is detected, the consent prompt displays a message that indicates that admin approval is needed. If the [admin consent request workflow](configure-admin-consent-workflow.md) is enabled, the user can send the request to an admin for further review directly from the consent prompt. If the admin consent request workflow isn't enabled, the following message is displayed:
 
-> "**AADSTS90094**: \<clientAppDisplayName> needs permission to access resources in your organization that only an admin can grant. Request an admin to grant permission to this app before you can use it."
+> **AADSTS90094**: \<clientAppDisplayName> needs permission to access resources in your organization that only an admin can grant. Request an admin to grant permission to this app before you can use it.
+
 In this case, an audit event is also logged with a category of "ApplicationManagement," an activity type of "Consent to application,"  and a status reason of "Risky application detected."
 
 ## Prerequisites

articles/azure-functions/functions-add-output-binding-storage-queue-vs-code.md

@@ -75,6 +75,8 @@ Extension bundles usage is enabled in the host.json file at the root of the proj
 
 :::code language="json" source="~/functions-quickstart-java/functions-add-output-binding-storage-queue/host.json":::
 
+Now, you can add the storage output binding to your project.
+
 ::: zone-end
 
 ::: zone pivot="programming-language-csharp"
@@ -83,8 +85,6 @@ Extension bundles usage is enabled in the host.json file at the root of the proj
 
 ::: zone-end
 
-Now, you can add the storage output binding to your project.
-
 ## Add an output binding
 
 In Functions, each type of binding requires a `direction`, `type`, and a unique `name` to be defined in the function.json file. The way you define these attributes depends on the language of your function app.

articles/backup/backup-support-matrix-iaas.md

@@ -81,7 +81,7 @@ For Azure VM Linux backups, Azure Backup supports the list of Linux [distributio
 - Azure Backup doesn't support Core OS Linux.
 - Azure Backup doesn't support 32-bit operating systems.
 - Other bring-your-own Linux distributions might work as long as the [Azure VM agent for Linux](../virtual-machines/extensions/agent-linux.md) is available on the VM, and as long as Python is supported.
-- Azure Backup doesn't support a proxy-configured Linux VM if it doesn't have Python version 2.7 installed.
+- Azure Backup doesn't support a proxy-configured Linux VM if it doesn't have Python version 2.7 or higher installed.
 - Azure Backup doesn't support backing up NFS files that are mounted from storage, or from any other NFS server, to Linux or Windows machines. It only backs up disks that are locally attached to the VM.
 
 ## Support matrix for managed pre-post scripts for Linux databases
@@ -255,4 +255,4 @@ On-premises/Azure VMs with MABS | ![Yes][green] | ![Yes][green]
 
 [green]: ./media/backup-support-matrix/green.png
 [yellow]: ./media/backup-support-matrix/yellow.png
-[red]: ./media/backup-support-matrix/red.png
+[red]: ./media/backup-support-matrix/red.png

articles/backup/tutorial-sap-hana-restore-cli.md

@@ -2,8 +2,11 @@
 title: Tutorial - SAP HANA DB restore on Azure using CLI 
 description: In this tutorial, learn how to restore SAP HANA databases running on an Azure VM from an Azure Backup Recovery Services vault using Azure CLI.
 ms.topic: tutorial
-ms.date: 12/4/2019 
+ms.date: 12/23/2021 
 ms.custom: devx-track-azurecli
+author: v-amallick
+ms.service: backup
+ms.author: v-amallick
 ---
 
 # Tutorial: Restore SAP HANA databases in an Azure VM using Azure CLI
@@ -21,11 +24,11 @@ By the end of this tutorial you'll be able to:
 
 This tutorial assumes you have an SAP HANA database running on Azure VM that's backed-up using Azure Backup. If you've used [Back up an SAP HANA database in Azure using CLI](tutorial-sap-hana-backup-cli.md) to back up your SAP HANA database, then you're using the following resources:
 
-* a resource group named *saphanaResourceGroup*
-* a vault named *saphanaVault*
-* protected container named *VMAppContainer;Compute;saphanaResourceGroup;saphanaVM*
-* backed-up database/item named *saphanadatabase;hxe;hxe*
-* resources in the *westus2* region
+* A resource group named *saphanaResourceGroup*
+* A vault named *saphanaVault*
+* Protected container named *VMAppContainer;Compute;saphanaResourceGroup;saphanaVM*
+* Backed-up database/item named *saphanadatabase;hxe;hxe*
+* Resources in the *westus2* region
 
 ## View restore points for a backed-up database
 
@@ -168,6 +171,66 @@ Name                                  Resource
 
 The response will give you the job name. This job name can be used to track the job status using the [az backup job show](/cli/azure/backup/job#az_backup_job_show) cmdlet.
 
+## Restore to secondary region
+
+To restore a database to the secondary region, specify a target vault and server located in the secondary region, in the restore configuration.
+
+```azurecli-interactive
+az backup recoveryconfig show --resource-group saphanaResourceGroup \
+    --vault-name saphanaVault \
+    --container-name VMAppContainer;compute;hanasnapshotcvtmachines;hanasnapcvt01 \
+    --item-name SAPHanaDatabase;h10;h10 \
+    --restore-mode AlternateWorkloadRestore \
+    --from-full-rp-name 293170069256531 \
+    --rp-name 293170069256531 \
+    --target-server-name targethanaserver \
+    --target-container-name VMAppContainer;compute;saphanaTargetRG;targethanaserver \
+    --target-item-name h10 \
+    --target-server-type HANAInstance \
+    --workload-type SAPHANA \
+    --target-resource-group saphanaTargetRG \
+    --target-vault-name targetVault \
+    --backup-management-type AzureWorkload
+```
+
+Following is the response to the above command that will be a recovery configuration object:
+
+```output
+{
+  "alternate_directory_paths": null,
+  "container_id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/saphanaTargetRG/providers/Microsoft.RecoveryServices/vaults/targetVault/backupFabrics/Azure/protectionContainers/vmappcontainer;compute;saphanaTargetRG;targethanaserver",
+  "container_uri": "VMAppContainer;compute;hanasnapshotcvtmachines;hanasnapcvt01",
+  "database_name": "SAPHanaDatabase;h10;h10",
+  "filepath": null,
+  "item_type": "SAPHana",
+  "item_uri": "SAPHanaDatabase;h10;h10",
+  "log_point_in_time": null,
+  "recovery_mode": null,
+  "recovery_point_id": "293170069256531",
+  "restore_mode": "AlternateLocation",
+  "source_resource_id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/saphanaResourceGroup/providers/Microsoft.Compute/virtualMachines/hanasnapcvt01",
+  "workload_type": "SAPHanaDatabase"
+}
+```
+
+Use this recovery configuration in the [az restore restore-azurewl](/cli/azure/backup/restore#az_backup_restore_restore_azurewl) cmdlet. Select the `--use-secondary-region` flag to restore the database to the secondary region.
+
+```azurecli-interactive
+az backup restore restore-azurewl --resource-group saphanaResourceGroup \
+    --vault-name saphanaVault \
+    --recovery-config recoveryconfig.json \
+    --use-secondary-region \
+    --output table
+```
+
+The output will be as follows:
+
+```output
+Name                                  Operation           Status      Item Name            Backup Management Type    Start Time UTC                    Duration
+------------------------------------  ------------------  ----------  -------------------  ------------------------  --------------------------------  --------------
+00000000-0000-0000-0000-000000000000  CrossRegionRestore  InProgress  H10 [hanasnapcvt01]  AzureWorkload             2021-12-22T05:21:34.165617+00:00  0:00:05.665470
+```
+
 ## Restore as files
 
 To restore the backup data as files instead of a database, we'll use **RestoreAsFiles** as the restore mode. Then choose the restore point, which can either be a previous point-in-time or any of the previous restore points. Once the files are dumped to a specified path, you can take these files to any SAP HANA machine where you want to restore them as a database. Because you can move these files to any machine, you can now restore the data across subscriptions and regions.

articles/hdinsight/hdinsight-release-notes.md

@@ -17,7 +17,7 @@ If you would like to subscribe on release notes, watch releases on [this GitHub
 
 ## Release date: 12/27/2021
 
-This release applies for both HDInsight 4.0. HDInsight release is made available to all regions over several days. The release date here indicates the first region release date. If you don't see below changes, wait for the release being live in your region over several days.
+This release applies for HDInsight 4.0. HDInsight release is made available to all regions over several days. The release date here indicates the first region release date. If you don't see below changes, wait for the release being live in your region over several days.
 
 The OS versions for this release are:
 - HDInsight 4.0: Ubuntu 18.04.5 LTS