Merge pull request #101107 from MicrosoftDocs/repo_sync_working_branch

Confirm merge from repo_sync_working_branch to master to sync with https://github.com/Microsoft/azure-docs (branch master)

Author: tfosmark

articles/active-directory-b2c/contentdefinitions.md

@@ -33,7 +33,7 @@ The following example shows the content definition identifier and the definition
   <Metadata>
     <Item Key="DisplayName">Local account sign up page</Item>
   </Metadata>
-  <LoalizedResourcesReferences MergeBehavior="Prepend">
+  <LocalizedResourcesReferences MergeBehavior="Prepend">
     <LocalizedResourcesReference Language="en" LocalizedResourcesReferenceId="api.localaccountsignup.en" />
     <LocalizedResourcesReference Language="es" LocalizedResourcesReferenceId="api.localaccountsignup.es" />
     ...

articles/active-directory/devices/howto-vm-sign-in-azure-ad-windows.md

@@ -46,6 +46,9 @@ The following Windows distributions are currently supported during the preview o
 - Windows Server 2019 Datacenter
 - Windows 10 1809 and later
 
+> [!IMPORTANT]
+> Remote connection to VMs joined to Azure AD is only allowed from Windows 10 PCs that are Azure AD joined or hybrid Azure AD joined to the **same** directory as the VM. 
+
 The following Azure regions are currently supported during the preview of this feature:
 
 - All Azure global regions

articles/active-directory/saas-apps/adobe-creative-cloud-tutorial.md

@@ -22,6 +22,9 @@ ms.collection: M365-identity-device-management
 
 # Tutorial: Azure Active Directory single sign-on (SSO) integration with Adobe Creative Cloud
 
+> [!NOTE]
+> This article describes Adobe Admin Console's custom SAML-based setup for Azure Active Directory (Azure AD). For brand-new configurations, we recommend that you use the [Azure AD Connector](https://helpx.adobe.com/enterprise/using/sso-setup-azure.html). Azure AD Connector can be set up in minutes and shortens the process of domain claim, single sign-on setup, and user sync.
+
 In this tutorial, you'll learn how to integrate Adobe Creative Cloud with Azure Active Directory (Azure AD). When you integrate Adobe Creative Cloud with Azure AD, you can:
 
 * Control in Azure AD who has access to Adobe Creative Cloud.
@@ -108,7 +111,7 @@ Follow these steps to enable Azure AD SSO in the Azure portal.
 	> [!NOTE]
 	> Users need to have a valid Office 365 ExO license for email claim value to be populated in the SAML response.
 
-1. On the **Set up single sign-on with SAML** page, in the **SAML Signing Certificate** section,  find **Certificate (Base64)** and select **Download** to download the certificate and save it on your computer.
+1. On the **Set up single sign-on with SAML** page, in the **SAML Signing Certificate** section, find **Federation Data XML**, and then select **Download** to download the XML metadata file and save it on your computer.
 
 	![The Certificate download link](common/certificatebase64.png)
 
@@ -148,31 +151,26 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
 
 ## Configure Adobe Creative Cloud SSO
 
-1. In a different web browser window, sign-in to [Adobe Admin Console](https://adminconsole.adobe.com) as an administrator.
-
-2. Go to **Settings** on the top navigation bar and then choose **Identity**. The list of domains opens. Click **Configure** link against your domain. Then perform the following steps on **Single Sign On Configuration Required** section. For more information, see [Setup a domain](https://helpx.adobe.com/enterprise/using/set-up-domain.html)
-
-	![Settings](https://helpx.adobe.com/content/dam/help/en/enterprise/using/configure-microsoft-azure-with-adobe-sso/_jcr_content/main-pars/procedure_719391630/proc_par/step_3/step_par/image/edit-sso-configuration.png "Settings")
+1. In a different web browser window, sign in to [Adobe Admin Console](https://adminconsole.adobe.com) as a system administrator.
 
-	a. Click **Browse** to upload the downloaded certificate from Azure AD to **IDP Certificate**.
+1. Go to **Settings** on the top navigation bar, and then choose **Identity**. The list of directories opens. Select the Federated directory you want.
 
-	b. In the **IDP issuer** textbox, paste the value of **Azure AD Identifier** which you copied from Azure portal.
+1. On the **Directory Details** page, select **Configure**.
 
-	c. In the **IDP Login URL** textbox, paste the value of **Login URL** which you copied from Azure portal.
+1. Copy the Entity ID and the ACS URL (Assertion Consumer Service URL or Reply URL). Enter the URLs at the appropriate fields in the Azure portal.
 
-	d. Select **HTTP - Redirect** as **IDP Binding**.
+	![Configure single sign-on on the app side](./media/adobe-creative-cloud-tutorial/tutorial_adobe-creative-cloud_003.png)
 
-	e. Select **Email Address** as **User Login Setting**.
+	a. Use the Entity ID value Adobe provided you for **Identifier** in the **Configure App Settings** dialog box.
 
-	f. Click **Save** button.
+	b. Use the ACS URL (Assertion Consumer Service URL) value Adobe provided you for **Reply URL** in the **Configure App Settings** dialog box.
 
-3. The dashboard will now present the XML **"Download Metadata"** file. It contains Adobe’s EntityDescriptor URL and AssertionConsumerService URL. Please open the file and configure them in the Azure AD application.
+1. Near the bottom of the page, upload the **Federation Data XML** file that you downloaded from the Azure portal. 
 
-	![Configure Single Sign-On On App Side](./media/adobe-creative-cloud-tutorial/tutorial_adobe-creative-cloud_003.png)
+	![Federation Data XML file](https://helpx.adobe.com/content/dam/help/en/enterprise/kb/configure-microsoft-azure-with-adobe-sso/jcr_content/main-pars/procedure/proc_par/step_228106403/step_par/image_copy/saml_signinig_certificate.png "IdP Metadata XML")
 
-	a. Use the EntityDescriptor value Adobe provided you for **Identifier** on the **Configure App Settings** dialog.
+1. Select **Save**.
 
-	b. Use the AssertionConsumerService value Adobe provided you for **Reply URL** on the **Configure App Settings** dialog.
 
 ### Create Adobe Creative Cloud test user
 
@@ -205,7 +203,7 @@ When you click the Adobe Creative Cloud tile in the Access Panel, you should be
 
 - [Try Adobe Creative Cloud with Azure AD](https://aad.portal.azure.com/)
 
-- [Set up a domain (adobe.com)](https://helpx.adobe.com/enterprise/using/set-up-domain.html)
+- [Set up an identity (adobe.com)](https://helpx.adobe.com/enterprise/using/set-up-identity.html)
 
 - [Configure Azure for use with Adobe SSO (adobe.com)](https://helpx.adobe.com/enterprise/kb/configure-microsoft-azure-with-adobe-sso.html)
 

articles/active-directory/saas-apps/andfrankly-tutorial.md

@@ -122,19 +122,15 @@ To configure Azure AD single sign-on with &frankly, perform the following steps:
 
 	![The Certificate download link](common/metadataxml.png)
 
-7. On the **Set up &frankly** section, copy the appropriate URL(s) as per your requirement.
 
-	![Copy configuration URLs](common/copy-configuration-urls.png)
+### Configure &frankly single sign-on
 
-	a. Login URL
+To enable single sign-on in &frankly:
 
-	b. Azure Ad Identifier
-
-	c. Logout URL
-
-### Configure &frankly Single Sign-On
-
-To configure single sign-on on **&frankly** side, you need to send the downloaded **Federation Metadata XML** and appropriate copied URLs from Azure portal to [&frankly support team](mailto:[email protected]). They set this setting to have the SAML SSO connection set properly on both sides.
+1. Log in to &frankly. Go to **Account** > **User Management**.
+1. Change the authentication mechanism from the default to **Enterprise Sign-on (SAML)**.
+1. Upload the **Federation Metadata XML** that you downloaded in step 6 in the preceding section.
+1. Select **Save**.
 
 ### Create an Azure AD test user
 
@@ -203,4 +199,4 @@ When you click the &frankly tile in the Access Panel, you should be automaticall
 
 - [What is application access and single sign-on with Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis)
 
-- [What is Conditional Access in Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/conditional-access/overview)
+- [What is Conditional Access in Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/conditional-access/overview)

articles/active-directory/saas-apps/confluencemicrosoft-tutorial.md

@@ -61,24 +61,8 @@ To get started, you need the following items:
 As of now, following versions of Confluence are supported:
 
 - Confluence: 5.0 to 5.10
-- Confluence: 6.0.1
-- Confluence: 6.1.1
-- Confluence: 6.2.1
-- Confluence: 6.3.4
-- Confluence: 6.4.0
-- Confluence: 6.5.0
-- Confluence: 6.6.2
-- Confluence: 6.7.0
-- Confluence: 6.8.1
-- Confluence: 6.9.0
-- Confluence: 6.10.0
-- Confluence: 6.10.3
-- Confluence: 6.11.0
-- Confluence: 6.12.0
-- Confluence: 6.13.5
-- Confluence: 6.15.3
-- Confluence: 6.15.4
-- Confluence: 6.15.8
+- Confluence: 6.0.1 to 6.15.9
+- Confluence: 7.0.1 to 7.1.0
 
 > [!NOTE]
 > Please note that our Confluence Plugin also works on Ubuntu Version 16.04
@@ -283,4 +267,4 @@ When you click the Confluence SAML SSO by Microsoft tile in the Access Panel, yo
 
 - [What is conditional access in Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/conditional-access/overview)
 
-- [Try Confluence SAML SSO by Microsoft with Azure AD](https://aad.portal.azure.com/)
+- [Try Confluence SAML SSO by Microsoft with Azure AD](https://aad.portal.azure.com/)

articles/active-directory/saas-apps/kallidus-tutorial.md

@@ -89,7 +89,7 @@ Follow these steps to enable Azure AD SSO in the Azure portal.
 
 ### Configure Kallidus
 
-To configure single sign-on on **Kallidus** side, you need to send the **App Federation Metadata Url** to [Kallidus support team](https://kallidus.zendesk.com). They set this setting to have the SAML SSO connection set properly on both sides.
+To configure single sign-on on **Kallidus** side, you need to send the **App Federation Metadata Url** and a copy of the **Signing Certificate (Public)** to [Kallidus support team](https://kallidus.zendesk.com). They set this setting to have the SAML SSO connection set properly on both sides.
 
 ### Create an Azure AD test user
 

articles/active-directory/saas-apps/snowflake-tutorial.md

@@ -115,6 +115,9 @@ To configure Azure AD single sign-on with Snowflake, perform the following steps
 
 	In the **Sign-on URL** text box, type a URL using the following pattern:
     `https://<SNOWFLAKE-URL>.snowflakecomputing.com`
+    
+	In the **Logout URL** text box, type a URL using the following pattern:
+    `https://<SNOWFLAKE-URL>.snowflakecomputing.com/fed/logout`
 
     > [!NOTE]
 	> These values are not real. Update these values with the actual Identifier, Reply URL and Sign-on URL. Contact [Snowflake Client support team](https://support.snowflake.net/s/) to get these values. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Azure portal.

articles/aks/troubleshooting.md

@@ -41,7 +41,7 @@ For more information, see [Plan IP addressing for your cluster](configure-azure-
 There might be various reasons for the pod being stuck in that mode. You might look into:
 
 * The pod itself, by using `kubectl describe pod <pod-name>`.
-* The logs, by using `kubectl log <pod-name>`.
+* The logs, by using `kubectl logs <pod-name>`.
 
 For more information on how to troubleshoot pod problems, see [Debug applications](https://kubernetes.io/docs/tasks/debug-application-cluster/debug-application/#debugging-pods).
 

articles/api-management/api-management-howto-protect-backend-with-aad.md

@@ -203,6 +203,9 @@ You can use the [Validate JWT](api-management-access-restriction-policies.md#Val
     </required-claims>
 </validate-jwt>
 ```
+> [!NOTE]
+> This `openid-config` URL corresponds to the v1 endpoint. For the v2 `openid-config`endpoint, use 
+> `https://login.microsoftonline.com/common/v2.0/.well-known/openid-configuration`.
 
 ## Build an application to call the API
 

articles/automation/automation-hybrid-runbook-worker.md

@@ -118,6 +118,7 @@ If you have an Automation account that's defined for a specific region, you can
 | South East Asia |sea-jobruntimedata-prod-su1.azure-automation.net</br>sea-agentservice-prod-1.azure-automation.net|
 | Central India |cid-jobruntimedata-prod-su1.azure-automation.net</br>cid-agentservice-prod-1.azure-automation.net |
 | Japan East |jpe-jobruntimedata-prod-su1.azure-automation.net</br>jpe-agentservice-prod-1.azure-automation.net |
+| Australia Central |ac-jobruntimedata-prod-su1.azure-automation.net</br>ac-agentservice-prod-1.azure-automation.net |
 | Australia East |ae-jobruntimedata-prod-su1.azure-automation.net</br>ae-agentservice-prod-1.azure-automation.net |
 | Australia South East |ase-jobruntimedata-prod-su1.azure-automation.net</br>ase-agentservice-prod-1.azure-automation.net |
 | UK South | uks-jobruntimedata-prod-su1.azure-automation.net</br>uks-agentservice-prod-1.azure-automation.net |