Merge branch 'main' into release-ga-azure-firewall-basic

Author: v-alje

.openpublishing.redirection.json

@@ -1,5 +1,10 @@
 {
     "redirections": [
+    {
+      "source_path": "articles/databox-online/azure-stack-edge-zero-touch-provisioning.md",
+      "redirect_url": "/azure/databox-online/azure-stack-edge-powershell-based-configuration",
+      "redirect_document_id": false
+    },
     {
       "source_path": "articles/azure-video-analyzer/video-analyzer-docs/access-policies.md",
       "redirect_url": "/previous-versions/azure/azure-video-analyzer/video-analyzer-docs/access-policies",

articles/active-directory-domain-services/migrate-from-classic-vnet.md

@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.subservice: domain-services
 ms.workload: identity
 ms.topic: how-to
-ms.date: 03/10/2023
+ms.date: 03/14/2023
 ms.author: justinha 
 ---
 
@@ -177,11 +177,12 @@ Before you begin the migration process, complete the following initial checks an
     | Source      | Source service tag                 | Source port ranges |  Destination  | Service | Destination port ranges | Protocol | Action | Required | Purpose |
     |:-----------:|:----------------------------------:|:------------------:|:-------------:|:-------:|:-----------------------:|:--------:|:------:|:--------:|:--------|
     | Service tag | AzureActiveDirectoryDomainServices | *                  | Any           | WinRM   | 5986        | TCP       | Allow  | Yes       | Management of your domain |
-    | Service tag | CorpNetSaw                         | *                  | Any           | WinRM   | 3389        | TCP       | Allow  | Optional  | Debugging for support |
-    | Service tag | AzureActiveDirectoryDomainServices | *                  | Any           | WinRM   | 636         | TCP       | Allow  | Optional  | Secure LDAP |
-
+    | Service tag | CorpNetSaw                         | *                  | Any           | RDP   | 3389        | TCP       | Allow  | Optional  | Debugging for support |
+    
     Make a note of this target resource group, target virtual network, and target virtual network subnet. These resource names are used during the migration process.
 
+    Please note that the **CorpNetSaw** service tag isn't available by using Azure portal, and the network security group rule for **CorpNetSaw** has to be added by using PowerShell (powershell-create-instance.md#create-a-network-security-group).
+
 1. Check the managed domain health in the Azure portal. If you have any alerts for the managed domain, resolve them before you start the migration process.
 1. Optionally, if you plan to move other resources to the Resource Manager deployment model and virtual network, confirm that those resources can be migrated. For more information, see [Platform-supported migration of IaaS resources from Classic to Resource Manager][migrate-iaas].
 

articles/active-directory/authentication/concept-system-preferred-multifactor-authentication.md

@@ -50,7 +50,7 @@ System-preferred MFA can be enabled only for a single group, which can be a dyna
 Use the following API endpoint to enable **systemCredentialPreferences** and include or exclude groups:
 
 ```
-https://graph.microsoft.com/beta/authenticationMethodsPolicy
+https://graph.microsoft.com/beta/policies/authenticationMethodsPolicy
 ```
 
 >[!NOTE]

articles/active-directory/fundamentals/5-secure-access-b2b.md

@@ -81,7 +81,7 @@ You can enable collaboration across Microsoft clouds, such as Microsoft Azure op
 Learn more: 
 
 * [Microsoft Azure operated by 21Vianet](/azure/china/overview-operations)
-* [Azure Government developer guide](/azure-government/documentation-government-developer-guide)
+* [Azure Government developer guide](/azure/azure-government/documentation-government-developer-guide)
 * [Configure Microsoft cloud settings for B2B collaboration (Preview)](../external-identities/cross-cloud-settings.md).
 
 You can allow inbound access to specific tenants (allowlist), and set the default policy to block access. Then, create organizational policies that allow access by user, group, or application.

articles/active-directory/fundamentals/users-default-permissions.md

@@ -40,7 +40,7 @@ Applications | <ul><li>Register (create) new applications<li>Enumerate the list
 Devices</li></ul> | <ul><li>Enumerate the list of all devices<li>Read all properties of devices<li>Manage all properties of owned devices</li></ul> | No permissions | No permissions
 Organization | <ul><li>Read all company information<li>Read all domains<li>Read configuration of certificate-based authentication<li>Read all partner contracts</li></ul> | <ul><li>Read company display name<li>Read all domains<li>Read configuration of certificate-based authentication</li></ul> | <ul><li>Read company display name<li>Read all domains</li></ul>
 Roles and scopes | <ul><li>Read all administrative roles and memberships<li>Read all properties and membership of administrative units</li></ul> | No permissions | No permissions
-Subscriptions | <ul><li>Read all subscriptions<li>Enable service plan memberships</li></ul> | No permissions | No permissions
+Subscriptions | <ul><li>Read all licensing subscriptions<li>Enable service plan memberships</li></ul> | No permissions | No permissions
 Policies | <ul><li>Read all properties of policies<li>Manage all properties of owned policies</li></ul> | No permissions | No permissions
 
 ## Restrict member users' default permissions 

articles/active-directory/manage-apps/configure-admin-consent-workflow.md

@@ -52,8 +52,8 @@ To enable the admin consent workflow and choose reviewers:
 
 1. Select **Save**. It can take up to an hour for the workflow to become enabled.
 
- > [!NOTE]
- > You can add or remove reviewers for this workflow by modifying the **Select admin consent requests reviewers** list. A current limitation of this feature is that a reviewer can retain the ability to review requests that were made while they were designated as a reviewer.
+> [!NOTE]
+> You can add or remove reviewers for this workflow by modifying the **Who can review admin consent requests** list. A current limitation of this feature is that a reviewer can retain the ability to review requests that were made while they were designated as a reviewer.
 
 ## Configure the admin consent workflow using Microsoft Graph
 

articles/active-directory/manage-apps/media/configure-admin-consent-workflow/enable-admin-consent-workflow.png

@@ -60,7 +60,7 @@ As of now, following versions of Confluence are supported:
 
 - Confluence: 5.0 to 5.10
 - Confluence: 6.0.1 to 6.15.9
-- Confluence: 7.0.1 to 7.20.0
+- Confluence: 7.0.1 to 8.1.0
 
 > [!NOTE]
 > Please note that our Confluence Plugin also works on Ubuntu Version 16.04

articles/active-directory/saas-apps/confluencemicrosoft-tutorial.md

@@ -64,7 +64,7 @@ The plug-in supports the following versions of Jira and Confluence:
 * JIRA also supports 5.2. For more details, click [Microsoft Azure Active Directory single sign-on for JIRA 5.2](./jira52microsoft-tutorial.md).
 * Confluence: 5.0 to 5.10.
 * Confluence: 6.0.1 to 6.15.9.
-* Confluence: 7.0.1 to 7.20.0.
+* Confluence: 7.0.1 to 8.1.0.
 
 ## Installation
 
@@ -124,6 +124,7 @@ The following image shows the configuration screen in both Jira and Confluence:
 
    * For App proxy setup , follow the steps on the [Azure AD App Proxy Documentation](../app-proxy/what-is-application-proxy.md).
 ## Release Notes
+JIRA:
 
 |Plugin Version   |                                   Release Notes                                           |       Supported JIRA versions       |
 |-----------------|-------------------------------------------------------------------------------------------|-------------------------------------|
@@ -143,7 +144,20 @@ The following image shows the configuration screen in both Jira and Confluence:
 |                 |    We have now resolved the security fix in this version. This will protect you from user impersonation vulnerability.|       |
 |                 |    JIRA Service Desk logout issue is resolved.                                         |                                     |
 
- 
+Confluence:
+
+|Plugin Version   |                                   Release Notes                                           |       Supported JIRA versions       |
+|-----------------|-------------------------------------------------------------------------------------------|-------------------------------------|
+|  6.3.9          |   Bug Fixes:                                                                              | Confluence Server: 7.20.3 to 8.1.0  |
+|                 |   System Error: Metadata link cannot be configured on SSO plugins.                        |                                     |
+|                 |                                                                                           |                                     |
+|  6.3.8          |   New Feature:                                                                            | Confluence Server: 5.0 to 7.20.1    |
+|                 |   Application Proxy Support - Checkbox on the configure plugin screen to toggle the App Proxy mode so as to make the Reply URL editable as per the need to point it to the proxy server URL                                                                      |                                     |
+|                 |                                                                                           |                                     |
+|  6.3.7          |   Bug Fixes:                                                                              | Confluence Server: 5.0 to 7.19.0    |
+|                 |   "Force Login" functionality allows the IT admins to force the Azure AD authentication to users. This way users will not see the username and password box and they will be forced to use SSO.                                                              |                                     |
+|                 |   "Force Login" is configurable from the plugin                                           |                                     |
+|                 |   You can pass the domain string to Azure AD so that Azure AD can directly redirect the user to your Federation server.|        |  
 
 ## Troubleshooting
 
@@ -198,7 +212,7 @@ The plug-in supports these versions:
 * JIRA also supports 5.2. For more details, click [Microsoft Azure Active Directory single sign-on for JIRA 5.2](./jira52microsoft-tutorial.md).
 * Confluence: 5.0 to 5.10.
 * Confluence: 6.0.1 to 6.15.9.
-* Confluence: 7.0.1 to 7.20.0.
+* Confluence: 7.0.1 to 8.1.0.
 
 ### Is the plug-in free or paid?
 

articles/active-directory/saas-apps/ms-confluence-jira-plugin-adminguide.md

@@ -52,31 +52,33 @@
     href: how-use-vcnetwork.md
   - name: Using the Request Service REST API
     href: get-started-request-api.md
-  - name: Link your domain to your DID
-    href: how-to-dnsbind.md
-  - name: Register your website ID
+  - name: Register decentralized ID
     href: how-to-register-didwebsite.md
+  - name: Verify domain ownership
+    href: how-to-dnsbind.md
   - name: Revoke a verifiable credential
     href: how-to-issuer-revoke.md
   - name: Opt out of Verified ID service
     href: how-to-opt-out.md
-  - name: Partner integration
+  - name: Partner gallery
     items:
-    - name: Partner gallery
-      href: partner-gallery.md
-    - name: Au10tix
-      href: howto-verifiable-credentials-partner-au10tix.md
-    - name: LexisNexis
-      href: howto-verifiable-credentials-partner-lexisnexis.md
-    - name: Vu
-      href: partner-vu.md
+    - name: IDV partners
+      items:
+      - name: IDV partner network
+        href: partner-gallery.md
+      - name: Au10tix
+        href: howto-verifiable-credentials-partner-au10tix.md
+      - name: LexisNexis
+        href: howto-verifiable-credentials-partner-lexisnexis.md
+      - name: Vu
+        href: partner-vu.md
+    - name: Services partners
+      href: services-partners.md
 - name: Samples
   expanded: true
   items:
   - name: Sample Applications
     href: https://github.com/Azure-Samples/active-directory-verifiable-credentials
-#  - name: Sample Issuer
-#   href: 
   - name: End to End Demo
     href: https://woodgroveemployee.azurewebsites.net/
 - name: Reference