Merge branch 'main' into patch-23

Author: dem108

.openpublishing.redirection.json

@@ -14442,121 +14442,6 @@
             "redirect_url": "/azure/networking/fundamentals/networking-overview",
             "redirect_document_id": false
         },
-        {
-            "source_path_from_root": "/articles/network-watcher/connection-monitor-preview-create-using-portal.md",
-            "redirect_url": "/azure/network-watcher/connection-monitor-create-using-portal",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/connection-monitor-preview-create-using-arm-client.md",
-            "redirect_url": "/azure/network-watcher/connection-monitor-create-using-template",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/connection-monitor-preview.md",
-            "redirect_url": "/azure/network-watcher/connection-monitor-overview",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-check-next-hop-portal.md",
-            "redirect_url": "/azure/network-watcher/diagnose-vm-network-routing-problem",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-check-next-hop-cli.md",
-            "redirect_url": "/azure/network-watcher/diagnose-vm-network-routing-problem-cli",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-check-next-hop-cli-nodejs.md",
-            "redirect_url": "/azure/network-watcher/diagnose-vm-network-routing-problem-cli",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-check-next-hop-powershell.md",
-            "redirect_url": "/azure/network-watcher/diagnose-vm-network-routing-problem-powershell",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-check-ip-flow-verify-portal.md",
-            "redirect_url": "/azure/network-watcher/diagnose-vm-network-traffic-filtering-problem",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-check-ip-flow-verify-cli.md",
-            "redirect_url": "/azure/network-watcher/diagnose-vm-network-traffic-filtering-problem-cli",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-check-ip-flow-verify-cli-nodejs.md",
-            "redirect_url": "/azure/network-watcher/diagnose-vm-network-traffic-filtering-problem-cli",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-check-ip-flow-verify-powershell.md",
-            "redirect_url": "/azure/network-watcher/diagnose-vm-network-traffic-filtering-problem-powershell",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/migrate-to-connection-monitor-preview-from-connection-monitor.md",
-            "redirect_url": "/azure/network-watcher/migrate-to-connection-monitor-from-connection-monitor-classic",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/migrate-to-connection-monitor-preview-from-network-performance-monitor.md",
-            "redirect_url": "/azure/network-watcher/migrate-to-connection-monitor-from-network-performance-monitor",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-nsg-flow-logging-cli-nodejs.md",
-            "redirect_url": "/azure/network-watcher/network-watcher-nsg-flow-logging-cli",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/prepare-flow-log.md",
-            "redirect_url": "/azure/network-watcher/network-watcher-nsg-flow-logging-overview",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-packet-capture-manage-cli-nodejs.md",
-            "redirect_url": "/azure/network-watcher/network-watcher-packet-capture-manage-cli",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-security-group-view-cli-nodejs.md",
-            "redirect_url": "/azure/network-watcher/network-watcher-security-group-view-cli",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-troubleshoot-manage-cli-nodejs.md",
-            "redirect_url": "/azure/network-watcher/network-watcher-troubleshoot-manage-cli",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-topology-cli.md",
-            "redirect_url": "/azure/network-watcher/view-network-topology",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-topology-cli-nodejs.md",
-            "redirect_url": "/azure/network-watcher/view-network-topology",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-topology-overview.md",
-            "redirect_url": "/azure/network-watcher/view-network-topology",
-            "redirect_document_id": true
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-topology-powershell.md",
-            "redirect_url": "/azure/network-watcher/view-network-topology",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-topology-rest.md",
-            "redirect_url": "/azure/network-watcher/view-network-topology",
-            "redirect_document_id": false
-        },
         {
             "source_path_from_root": "/articles/notebooks/index.yml",
             "redirect_url": "https://notebooks.azure.com",
@@ -20357,16 +20242,6 @@
             "redirect_url": "/rest/api/load-balancer/loadbalancers/createorupdate",
             "redirect_document_id": false
         },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-check-next-hop-rest.md",
-            "redirect_url": "/rest/api/network-watcher/networkwatchers/getnexthop",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/network-watcher/network-watcher-check-ip-flow-verify-rest.md",
-            "redirect_url": "/rest/api/network-watcher/networkwatchers/verifyipflow",
-            "redirect_document_id": false
-        },
         {
             "source_path_from_root": "/articles/resource-group-link-resources.md",
             "redirect_url": "/rest/api/resources/resourcelinks",
@@ -24543,22 +24418,22 @@
         },
         {
             "source_path_from_root": "/articles/active-directory/develop/single-page-app-tutorial-01-register-app.md",
-            "redirect_url": "/azure/active-directory/develop/tutorial-single-page-app-react-register-app.md",
+            "redirect_url": "/azure/active-directory/develop/tutorial-single-page-app-react-register-app",
             "redirect_document_id": false
         },
         {
             "source_path_from_root": "/articles/active-directory/develop/single-page-app-tutorial-02-prepare-spa.md",
-            "redirect_url": "/azure/active-directory/develop/tutorial-single-page-app-react-prepare-spa.md",
+            "redirect_url": "/azure/active-directory/develop/tutorial-single-page-app-react-prepare-spa",
             "redirect_document_id": false
         },
         {
             "source_path_from_root": "/articles/active-directory/develop/single-page-app-tutorial-03-sign-in-users.md",
-            "redirect_url": "/azure/active-directory/develop/tutorial-single-page-app-react-sign-in-users.md",
+            "redirect_url": "/azure/active-directory/develop/tutorial-single-page-app-react-sign-in-users",
             "redirect_document_id": false
         },
         {
             "source_path_from_root": "/articles/active-directory/develop/single-page-app-tutorial-04-call-api.md",
-            "redirect_url": "/azure/active-directory/develop/tutorial-single-page-app-react-call-api.md",
+            "redirect_url": "/azure/active-directory/develop/tutorial-single-page-app-react-call-api",
             "redirect_document_id": false
         }
     ]

articles/active-directory/app-provisioning/known-issues.md

@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.subservice: app-provisioning
 ms.workload: identity
 ms.topic: troubleshooting
-ms.date: 09/21/2023
+ms.date: 09/28/2023
 ms.reviewer: arvinh
 zone_pivot_groups: app-provisioning-cross-tenant-synchronization
 ---
@@ -106,7 +106,7 @@ Attribute-mapping expressions can have a maximum of 10,000 characters.
 
 #### Unsupported scoping filters
 
-Directory extensions and the **appRoleAssignments**, **userType**, and **accountExpires** attributes aren't supported as scoping filters.
+The **appRoleAssignments**, **userType**, and **accountExpires** attributes aren't supported as scoping filters.
 
 #### Multivalue directory extensions
 

articles/active-directory/app-provisioning/sap-successfactors-integration-reference.md

@@ -24,7 +24,7 @@ ms.reviewer: chmutali
 This article explains how the integration works and how you can customize the provisioning behavior for different HR scenarios. 
 
 ## Establishing connectivity 
-Microsoft Entra provisioning service uses basic authentication to connect to Employee Central OData API endpoints. When setting up the SuccessFactors provisioning app, use the *Tenant URL* parameter in the *Admin Credentials* section to configure the [API data center URL](https://apps.support.sap.com/sap/support/knowledge/en/2215682). 
+Microsoft Entra provisioning service uses basic authentication to connect to Employee Central OData API endpoints. When setting up the SuccessFactors provisioning app, use the *Tenant URL* parameter in the *Admin Credentials* section to configure the [API data center URL](https://help.sap.com/docs/SAP_SUCCESSFACTORS_PLATFORM/d599f15995d348a1b45ba5603e2aba9b/af2b8d5437494b12be88fe374eba75b6.html). 
 
 To further secure the connectivity between Microsoft Entra provisioning service and SuccessFactors, add the Microsoft Entra IP ranges in the SuccessFactors IP allowlist:
 

articles/active-directory/app-provisioning/skip-out-of-scope-deletions.md

@@ -59,10 +59,10 @@ Copy the Response into a text file. It looks like the JSON text shown, with valu
 Here's the JSON block to add to the mapping. 
 
 ```json
-        {
-            "key": "SkipOutOfScopeDeletions",
-            "value": "True"
-        }
+{
+  "key": "SkipOutOfScopeDeletions",
+  "value": "True"
+}
 ```
 
 ## Step 4: Update the secrets endpoint with the SkipOutOfScopeDeletions flag

articles/active-directory/authentication/how-to-mfa-registration-campaign.md

@@ -7,7 +7,7 @@ ms.service: active-directory
 ms.subservice: authentication
 ms.custom: ignite-2022
 ms.topic: conceptual
-ms.date: 09/27/2023
+ms.date: 09/28/2023
 
 ms.author: justinha
 author: mjsantani
@@ -134,7 +134,7 @@ Here are a few sample JSONs you can use to get started!
 
 - Include all users 
 
-  If you want to include ALL users in your tenant, [download this JSON](https://download.microsoft.com/download/1/4/E/14E6151E-C40A-42FB-9F66-D8D374D13B40/All%20Users%20Enabled.json) and paste it in Graph Explorer and run `PATCH` on the endpoint. 
+  If you want to include ALL users in your tenant, update the following JSON example with the relevant GUIDs of your users and groups. Then paste it in Graph Explorer and run `PATCH` on the endpoint. 
 
   ```json
   {
@@ -158,7 +158,7 @@ Here are a few sample JSONs you can use to get started!
 
 - Include specific users or groups of users
 
-  If you want to include certain users or groups in your tenant, [download this JSON](https://download.microsoft.com/download/1/4/E/14E6151E-C40A-42FB-9F66-D8D374D13B40/Multiple%20Includes.json) and update it with the relevant GUIDs of your users and groups. Then paste the JSON in Graph Explorer and run `PATCH` on the endpoint. 
+  If you want to include certain users or groups in your tenant, update the following JSON example with the relevant GUIDs of your users and groups. Then paste the JSON in Graph Explorer and run `PATCH` on the endpoint. 
 
   ```json
   {
@@ -182,11 +182,12 @@ Here are a few sample JSONs you can use to get started!
             ]
         }
     }
+  }  
   ```
 
-- Include and exclude specific users/groups of users
+- Include and exclude specific users or groups
 
-  If you want to include AND exclude certain users/groups of users in your tenant, [download this JSON](https://download.microsoft.com/download/1/4/E/14E6151E-C40A-42FB-9F66-D8D374D13B40/Multiple%20Includes%20and%20Excludes.json) and paste it in Graph Explorer and run `PATCH` on the endpoint. Enter the correct GUIDs for your users and groups.
+  If you want to include AND exclude certain users or groups in your tenant, update the following JSON example with the relevant GUIDs of your users and groups. Then paste it in Graph Explorer and run `PATCH` on the endpoint. 
 
   ```json
   {
@@ -286,13 +287,13 @@ No. The snooze duration for the prompt is a tenant-wide setting and applies to a
 
 The feature aims to empower admins to get users set up with MFA using the Authenticator app and not passwordless phone sign-in.  
 
-**Will a user who has a 3rd party authenticator app setup see the nudge?** 
+**Will a user who signs in with a 3rd party authenticator app see the nudge?** 
 
-If this user doesn’t have the Authenticator app set up for push notifications and is enabled for it by policy, yes, the user will see the nudge. 
+Yes. If a user is enabled for the registration campaign and doesn't have Microsoft Authenticator set up for push notifications, the user is nudged to set up Authenticator. 
 
-**Will a user who has the Authenticator app setup only for TOTP codes see the nudge?** 
+**Will a user who has Authenticator set up only for TOTP codes see the nudge?**
 
-Yes. If the Authenticator app is not set up for push notifications and the user is enabled for it by policy, yes, the user will see the nudge.
+Yes. If a user is enabled for the registration campaign and Authenticator app isn't set up for push notifications, the user is nudged to set up push notification with Authenticator.
 
 **If a user just went through MFA registration, are they nudged in the same sign-in session?** 
 
@@ -316,9 +317,9 @@ Yes. If they have been scoped for the nudge using the policy.
 
 **What if the user closes the browser?** 
 
-It's the same as snoozing. If setup is required for a user after they snoozed three times, the user will get prompted the next time they sign in.
+It's the same as snoozing. If setup is required for a user after they snoozed three times, the user is prompted the next time they sign in.
 
-**Why don’t some users see a nudge when there is a Conditional Access policy for "Register security information"?**
+**Why don't some users see a nudge when there is a Conditional Access policy for "Register security information"?**
 
 A nudge won't appear if a user is in scope for a Conditional Access policy that blocks access to the **Register security information** page.
 

articles/active-directory/external-identities/customers/how-to-customize-branding-customers.md

@@ -57,7 +57,7 @@ The following image displays the neutral default branding of the customer tenant
 
 Before you customize any settings, the neutral default branding will appear in your sign-in and sign-up pages. You can customize this default experience with a custom background image or color, favicon, layout, header, and footer. You can also upload a [custom CSS](/azure/active-directory/fundamentals/reference-company-branding-css-template). 
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Global Administrator](/azure/active-directory/roles/permissions-reference#global-administrator).
 1. If you have access to multiple tenants, use the **Directories + subscriptions** filter :::image type="icon" source="media/common/portal-directory-subscription-filter.png" border="false"::: in the top menu to switch to the customer tenant you created earlier.
 1. Browse to **Company Branding** > **Default sign-in** > **Edit**.
 
@@ -174,7 +174,7 @@ Your customer tenant name replaces the Microsoft banner logo in the neutral defa
 
 :::image type="content" source="media/how-to-customize-branding-customers/tenant-name.png" alt-text="Screenshot of the tenant name." lightbox="media/how-to-customize-branding-customers/tenant-name.png":::
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com/).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com/) as at least a [Global Administrator](/azure/active-directory/roles/permissions-reference#global-administrator).
 1. If you have access to multiple tenants, use the **Directories + subscriptions** filter :::image type="icon" source="media/common/portal-directory-subscription-filter.png" border="false"::: in the top menu to switch to the customer tenant you created earlier.
 1. In the search bar, type and select **Properties**.
 1. Edit the **Name** field. 
@@ -187,7 +187,7 @@ Your customer tenant name replaces the Microsoft banner logo in the neutral defa
 
 When no longer needed, you can remove the sign-in customization from your customer tenant via the Azure portal.  
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Global Administrator](/azure/active-directory/roles/permissions-reference#global-administrator).
 1. If you have access to multiple tenants, use the **Directories + subscriptions** filter :::image type="icon" source="media/common/portal-directory-subscription-filter.png" border="false"::: in the top menu to switch to the customer tenant you created earlier.
 1. Browse to **Company branding** > **Default sign-in experience** > **Edit**.
 1. Remove the elements you no longer need.