Merge pull request #221717 from v-hgampala/aem

Product Backlog Item 2225081: SaaS App Tutorial: Adobe Experience Man…

Author: ttorble

articles/active-directory/saas-apps/adobeexperiencemanager-tutorial.md

@@ -9,7 +9,7 @@ ms.service: active-directory
 ms.subservice: saas-app-tutorial
 ms.workload: identity
 ms.topic: tutorial
-ms.date: 11/21/2022
+ms.date: 12/16/2022
 ms.author: jeedes
 ---
 # Tutorial: Azure Active Directory integration with Adobe Experience Manager
@@ -124,47 +124,47 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
 
 2. Select **Settings** > **Security** > **Users**.
 
-    ![Screenshot that shows the Users tile in the Adobe Experience Manager.](./media/adobe-experience-manager-tutorial/user-1.png)
+    ![Screenshot that shows the Users tile in the Adobe Experience Manager.](./media/adobe-experience-manager-tutorial/user.png)
 
 3. Select **Administrator** or any other relevant user.
 
-    ![Screenshot that highlights the Adminisrator user.](./media/adobe-experience-manager-tutorial/tutorial-admin-6.png)
+    ![Screenshot that highlights the Adminisrator user.](./media/adobe-experience-manager-tutorial/administrator.png)
 
 4. Select **Account settings** > **Manage TrustStore**.
 
     ![Screenshot that shows Manage TrustStore under Account settings.](./media/adobe-experience-manager-tutorial/manage-trust.png)
 
 5. Under **Add Certificate from CER file**, click **Select Certificate File**. Browse to and select the certificate file, which you already downloaded from the Azure portal.
 
-    ![Screenshot that highlights the Select Certificate File button.](./media/adobe-experience-manager-tutorial/user-2.png)
+    ![Screenshot that highlights the Select Certificate File button.](./media/adobe-experience-manager-tutorial/certificate-file.png)
 
 6. The certificate is added to the TrustStore. Note the alias of the certificate.
 
-    ![Screenshot that shows that the certificate is added to the TrustStore.](./media/adobe-experience-manager-tutorial/tutorial-admin-7.png)
+    ![Screenshot that shows that the certificate is added to the TrustStore.](./media/adobe-experience-manager-tutorial/trust-store.png)
 
 7. On the **Users** page, select **authentication-service**.
 
-    ![Sreenshot that highlights authentication-service on the screen.](./media/adobe-experience-manager-tutorial/tutorial-admin-8.png)
+    ![Screenshot that highlights authentication-service on the screen.](./media/adobe-experience-manager-tutorial/authentication-service.png)
 
 8. Select **Account settings** > **Create/Manage KeyStore**. Create KeyStore by supplying a password.
 
-    ![Screenshot that highlights Manage KeyStore.](./media/adobe-experience-manager-tutorial/tutorial-admin-9.png)
+    ![Screenshot that highlights Manage KeyStore.](./media/adobe-experience-manager-tutorial/manage-key-store.png)
 
 9. Go back to the admin screen. Then select **Settings** > **Operations** > **Web Console**.
 
-    ![Screenshot that highlights Web Console under Operations within the Settings section.](./media/adobe-experience-manager-tutorial/tutorial-admin-1.png)
+    ![Screenshot that highlights Web Console under Operations within the Settings section.](./media/adobe-experience-manager-tutorial/web-console.png)
 
     This opens the configuration page.
 
-    ![Configure the single sign-on save button](./media/adobe-experience-manager-tutorial/tutorial-admin-2.png)
+    ![Configure the single sign-on save button.](./media/adobe-experience-manager-tutorial/configuration-page.png)
 
 10. Find **Adobe Granite SAML 2.0 Authentication Handler**. Then select the **Add** icon.
 
-    ![Screenshot that highlights Adobe Granite SAML 2.0 Authentication Handler.](./media/adobe-experience-manager-tutorial/tutorial-admin-3.png)
+    ![Screenshot that highlights Adobe Granite SAML 2.0 Authentication Handler.](./media/adobe-experience-manager-tutorial/saml-handler.png)
 
 11. Take the following actions on this page.
 
-    ![Configure Single Sign-On Save button](./media/adobe-experience-manager-tutorial/tutorial-admin-4.png)
+    ![Screenshot shows for Configure Single Sign-On Save button.](./media/adobe-experience-manager-tutorial/adobe-configuration.png)
 
     a. In the **Path** box, enter **/**.
 
@@ -186,6 +186,16 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
 
     j. Select **Save**.
 
+1. In **Apache Sling Referrer Filter** section, perform the below steps:
+
+    ![Screenshot shows for Sling Referrer Filter.](./media/adobe-experience-manager-tutorial/allow-host.png)
+
+    a. Ensure **allow.empty** value is set to true.
+
+    b. Add `login.microsoftonline.com` to the **Allow Hosts**.
+
+    c. Click **Save**.
+
 ### Create Adobe Experience Manager test user
 
 In this section, you create a user called Britta Simon in Adobe Experience Manager. If you selected the **Autocreate CRX Users** option, users are created automatically after successful authentication.
@@ -198,15 +208,15 @@ In this section, you test your Azure AD single sign-on configuration with follow
 
 #### SP initiated:
 
-* Click on **Test this application** in Azure portal. This will redirect to Adobe Experience Manager Sign on URL where you can initiate the login flow.  
+* Click on **Test this application** in Azure portal. This will redirect to Adobe Experience Manager Sign-on URL where you can initiate the login flow.  
 
-* Go to Adobe Experience Manager Sign-on URL directly and initiate the login flow from there.
+* Go to Adobe Experience Manager Sign on URL directly and initiate the login flow from there.
 
 #### IDP initiated:
 
 * Click on **Test this application** in Azure portal and you should be automatically signed in to the Adobe Experience Manager for which you set up the SSO 
 
-You can also use Microsoft My Apps to test the application in any mode. When you click the Adobe Experience Manager tile in the My Apps, if configured in SP mode you would be redirected to the application sign on page for initiating the login flow and if configured in IDP mode, you should be automatically signed in to the Adobe Experience Manager for which you set up the SSO. For more information about the My Apps, see [Introduction to the My Apps](https://support.microsoft.com/account-billing/sign-in-and-start-apps-from-the-my-apps-portal-2f3b1bae-0e5a-4a86-a33e-876fbd2a4510).
+You can also use Microsoft My Apps to test the application in any mode. When you click the Adobe Experience Manager tile in the My Apps, if configured in SP mode you would be redirected to the application sign-on page for initiating the login flow and if configured in IDP mode, you should be automatically signed in to the Adobe Experience Manager for which you set up the SSO. For more information about the My Apps, see [Introduction to the My Apps](https://support.microsoft.com/account-billing/sign-in-and-start-apps-from-the-my-apps-portal-2f3b1bae-0e5a-4a86-a33e-876fbd2a4510).
 
 
 ## Next steps