Skip to content

Commit 39f0811

Browse files
huypubhuypub
authored
Merge pull request #192693 from MicrosoftDocs/main
3/23 PM Publish
2 parents 004eb0d + 43435a0 commit 39f0811

File tree

89 files changed

+916
-328
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

89 files changed

+916
-328
lines changed

‎.openpublishing.publish.config.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -844,13 +844,13 @@
844844
"branch_mapping": {}
845845
},
846846
{
847-
"path_to_root": "azure-signalr-samples",
847+
"path_to_root": "azuresignalr-samples",
848848
"url": "https://github.com/aspnet/AzureSignalR-samples",
849849
"branch": "main",
850850
"branch_mapping": {}
851851
},
852852
{
853-
"path_to_root": "azure-webpubsub-samples",
853+
"path_to_root": "azure-webpubsub",
854854
"url": "https://github.com/Azure/azure-webpubsub",
855855
"branch": "main",
856856
"branch_mapping": {}

‎.openpublishing.redirection.json

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,10 @@
11
{
22
"redirections": [
3+
{
4+
"source_path": "articles/confidential-ledger/register-ledger-service-principal.md",
5+
"redirect_url": "/azure/confidential-ledger/overview",
6+
"redirect_document_id": false
7+
},
38
{
49
"source_path": "articles/storage/blobs/storage-ios-how-to-use-blob-storage.md",
510
"redirect_url": "/previous-versions/azure/storage/blobs/storage-ios-how-to-use-blob-storage",

‎articles/active-directory/authentication/how-to-mfa-additional-context.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Learn how to use additional context in MFA notifications
44
ms.service: active-directory
55
ms.subservice: authentication
66
ms.topic: conceptual
7-
ms.date: 03/18/2022
7+
ms.date: 03/23/2022
88
ms.author: justinha
99
author: mjsantani
1010
ms.collection: M365-identity-device-management
@@ -13,7 +13,7 @@ ms.collection: M365-identity-device-management
1313
---
1414
# How to use additional context in Microsoft Authenticator notifications (Preview) - Authentication Methods Policy
1515

16-
This topic covers how to improve the security of user sign-in by adding application location based on IP address in Microsoft Authenticator push notifications.
16+
This topic covers how to improve the security of user sign-in by adding the application and location in Microsoft Authenticator push notifications.
1717

1818
## Prerequisites
1919

@@ -24,7 +24,7 @@ Your organization will need to enable Microsoft Authenticator push notifications
2424
2525
## Passwordless phone sign-in and multifactor authentication
2626

27-
When a user receives a Passwordless phone sign-in or MFA push notification in the Microsoft Authenticator app, they'll see the name of the application that requests the approval and the app location based on its IP address.
27+
When a user receives a Passwordless phone sign-in or MFA push notification in the Microsoft Authenticator app, they'll see the name of the application that requests the approval and the location based on the IP address where the sign-in originated from.
2828

2929
:::image type="content" border="false" source="./media/howto-authentication-passwordless-phone/location.png" alt-text="Screenshot of additional context in the MFA push notification.":::
3030

‎articles/active-directory/authentication/tutorial-enable-sspr-writeback.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -147,6 +147,9 @@ If you no longer want to use any password functionality, complete the following
147147
1. On the **Ready to configure** page, select **Configure** and wait for the process to finish.
148148
1. When you see the configuration finish, select **Exit**.
149149

150+
> [!IMPORTANT]
151+
> Enabling password writeback for the first time may trigger password change events 656 and 657, even if a password change has not occurred. This is because all password hashes are re-synchronized after a password hash synchronization cycle has run.
152+
150153
## Next steps
151154

152155
In this tutorial, you enabled Azure AD SSPR writeback to an on-premises AD DS environment. You learned how to:

‎articles/active-directory/governance/create-access-review.md

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ ms.workload: identity
1010
ms.tgt_pltfrm: na
1111
ms.topic: how-to
1212
ms.subservice: compliance
13-
ms.date: 02/18/2022
13+
ms.date: 03/22/2022
1414
ms.author: ajburnle
1515
ms.reviewer: mwahl
1616
ms.collection: M365-identity-device-management
@@ -241,7 +241,8 @@ Ue the following instructions to create an access review on a team with shared c
241241
1. Continue on to the **Reviews** tab. Select a reviewer to complete the review, then specify the **Duration** and **Review recurrence**.
242242

243243
> [!NOTE]
244-
> <ul> If you set **Select reviewers** to **Users review their own access** or **Managers of users**, B2B direct connect users and Teams won't be able to review their own access in your tenant. The owner of the Team under review will get an email that asks the owner to review the B2B direct connect user and Teams.</ul><ul>If you select **Managers of users**, a selected fallback reviewer will review any user without a manager in the home tenant. This includes B2B direct connect users and Teams without a manager.</ul>
244+
> - If you set **Select reviewers** to **Users review their own access** or **Managers of users**, B2B direct connect users and Teams won't be able to review their own access in your tenant. The owner of the Team under review will get an email that asks the owner to review the B2B direct connect user and Teams.
245+
> - If you select **Managers of users**, a selected fallback reviewer will review any user without a manager in the home tenant. This includes B2B direct connect users and Teams without a manager.
245246
246247
1. Go on to the **Settings** tab and configure additional settings. Then go to the **Review and Create** tab to start your access review. For more detailed information about creating a review and configuration settings, see our [Create a single-stage access review](#create-a-single-stage-access-review).
247248

‎articles/active-directory/saas-apps/informatica-platform-tutorial.md

Lines changed: 163 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,163 @@
1+
---
2+
title: 'Tutorial: Azure AD SSO integration with Informatica Platform'
3+
description: Learn how to configure single sign-on between Azure Active Directory and Informatica Platform.
4+
services: active-directory
5+
author: jeevansd
6+
manager: CelesteDG
7+
ms.reviewer: CelesteDG
8+
ms.service: active-directory
9+
ms.subservice: saas-app-tutorial
10+
ms.workload: identity
11+
ms.topic: tutorial
12+
ms.date: 03/23/2022
13+
ms.author: jeedes
14+
15+
---
16+
17+
# Tutorial: Azure AD SSO integration with Informatica Platform
18+
19+
In this tutorial, you'll learn how to integrate Informatica Platform with Azure Active Directory (Azure AD). When you integrate Informatica Platform with Azure AD, you can:
20+
21+
* Control in Azure AD who has access to Informatica Platform.
22+
* Enable your users to be automatically signed-in to Informatica Platform with their Azure AD accounts.
23+
* Manage your accounts in one central location - the Azure portal.
24+
25+
## Prerequisites
26+
27+
To get started, you need the following items:
28+
29+
* An Azure AD subscription. If you don't have a subscription, you can get a [free account](https://azure.microsoft.com/free/).
30+
* Informatica Platform single sign-on (SSO) enabled subscription.
31+
32+
* Along with Cloud Application Administrator, Application Administrator can also add or manage applications in Azure AD.
33+
For more information, see [Azure built-in roles](../roles/permissions-reference.md).
34+
35+
## Scenario description
36+
37+
In this tutorial, you configure and test Azure AD SSO in a test environment.
38+
39+
* Informatica Platform supports **SP** and **IDP** initiated SSO.
40+
41+
> [!NOTE]
42+
> Identifier of this application is a fixed string value so only one instance can be configured in one tenant.
43+
44+
## Add Informatica Platform from the gallery
45+
46+
To configure the integration of Informatica Platform into Azure AD, you need to add Informatica Platform from the gallery to your list of managed SaaS apps.
47+
48+
1. Sign in to the Azure portal using either a work or school account, or a personal Microsoft account.
49+
1. On the left navigation pane, select the **Azure Active Directory** service.
50+
1. Navigate to **Enterprise Applications** and then select **All Applications**.
51+
1. To add new application, select **New application**.
52+
1. In the **Add from the gallery** section, type **Informatica Platform** in the search box.
53+
1. Select **Informatica Platform** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
54+
55+
## Configure and test Azure AD SSO for Informatica Platform
56+
57+
Configure and test Azure AD SSO with Informatica Platform using a test user called **B.Simon**. For SSO to work, you need to establish a link relationship between an Azure AD user and the related user in Informatica Platform.
58+
59+
To configure and test Azure AD SSO with Informatica Platform, perform the following steps:
60+
61+
1. **[Configure Azure AD SSO](#configure-azure-ad-sso)** - to enable your users to use this feature.
62+
1. **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with B.Simon.
63+
1. **[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable B.Simon to use Azure AD single sign-on.
64+
1. **[Configure Informatica Platform SSO](#configure-informatica-platform-sso)** - to configure the single sign-on settings on application side.
65+
1. **[Create Informatica Platform test user](#create-informatica-platform-test-user)** - to have a counterpart of B.Simon in Informatica Platform that is linked to the Azure AD representation of user.
66+
1. **[Test SSO](#test-sso)** - to verify whether the configuration works.
67+
68+
## Configure Azure AD SSO
69+
70+
Follow these steps to enable Azure AD SSO in the Azure portal.
71+
72+
1. In the Azure portal, on the **Informatica Platform** application integration page, find the **Manage** section and select **single sign-on**.
73+
1. On the **Select a single sign-on method** page, select **SAML**.
74+
1. On the **Set up single sign-on with SAML** page, click the pencil icon for **Basic SAML Configuration** to edit the settings.
75+
76+
![Edit Basic SAML Configuration](common/edit-urls.png)
77+
78+
1. On the **Basic SAML Configuration** section, perform the following steps:
79+
80+
a. In the **Identifier** text box, type the value:
81+
`Informatica`
82+
83+
b. In the **Reply URL** text box, type a URL using the following pattern:
84+
`https://<host name: port number>/administrator/Login.do`
85+
86+
c. In the **Sign-on URL** text box, type a URL using the following pattern:
87+
`https://<host name: port number>/administrator/saml/login`
88+
89+
> [!NOTE]
90+
> These values are not real. Update these values with the actual Reply URL and Sign-on URL. Contact [Informatica Platform Client support team](mailto:[email protected]) to get these values. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Azure portal.
91+
92+
1. Informatica Platform application expects the SAML assertions in a specific format, which requires you to add custom attribute mappings to your SAML token attributes configuration. The following screenshot shows the list of default attributes.
93+
94+
![image](common/default-attributes.png)
95+
96+
1. In addition to above, Informatica Platform application expects few more attributes to be passed back in SAML response, which are shown below. These attributes are also pre populated but you can review them as per your requirements.
97+
98+
| Name | Source Attribute |
99+
| -----| ---------------- |
100+
| firstName | user.givenname |
101+
| lastName | user.surname |
102+
| email | user.mail |
103+
| Administrator | user.givenname |
104+
105+
1. On the **Set up single sign-on with SAML** page, in the **SAML Signing Certificate** section, find **Certificate (PEM)** and select **Download** to download the certificate and save it on your computer.
106+
107+
![The Certificate download link](common/certificate-base64-download.png)
108+
109+
1. On the **Set up Informatica Platform** section, copy the appropriate URL(s) based on your requirement.
110+
111+
![Copy configuration URLs](common/copy-configuration-urls.png)
112+
113+
### Create an Azure AD test user
114+
115+
In this section, you'll create a test user in the Azure portal called B.Simon.
116+
117+
1. From the left pane in the Azure portal, select **Azure Active Directory**, select **Users**, and then select **All users**.
118+
1. Select **New user** at the top of the screen.
119+
1. In the **User** properties, follow these steps:
120+
1. In the **Name** field, enter `B.Simon`.
121+
1. In the **User name** field, enter the [email protected]. For example, `[email protected]`.
122+
1. Select the **Show password** check box, and then write down the value that's displayed in the **Password** box.
123+
1. Click **Create**.
124+
125+
### Assign the Azure AD test user
126+
127+
In this section, you'll enable B.Simon to use Azure single sign-on by granting access to Informatica Platform.
128+
129+
1. In the Azure portal, select **Enterprise Applications**, and then select **All applications**.
130+
1. In the applications list, select **Informatica Platform**.
131+
1. In the app's overview page, find the **Manage** section and select **Users and groups**.
132+
1. Select **Add user**, then select **Users and groups** in the **Add Assignment** dialog.
133+
1. In the **Users and groups** dialog, select **B.Simon** from the Users list, then click the **Select** button at the bottom of the screen.
134+
1. If you are expecting a role to be assigned to the users, you can select it from the **Select a role** dropdown. If no role has been set up for this app, you see "Default Access" role selected.
135+
1. In the **Add Assignment** dialog, click the **Assign** button.
136+
137+
## Configure Informatica Platform SSO
138+
139+
To configure single sign-on on **Informatica Platform** side, you need to send the downloaded **Certificate (PEM)** and appropriate copied URLs from Azure portal to [Informatica Platform support team](mailto:[email protected]). They set this setting to have the SAML SSO connection set properly on both sides.
140+
141+
### Create Informatica Platform test user
142+
143+
In this section, you create a user called Britta Simon in Informatica Platform. Work with [Informatica Platform support team](mailto:[email protected]) to add the users in the Informatica Platform platform. Users must be created and activated before you use single sign-on.
144+
145+
## Test SSO
146+
147+
In this section, you test your Azure AD single sign-on configuration with following options.
148+
149+
#### SP initiated:
150+
151+
* Click on **Test this application** in Azure portal. This will redirect to Informatica Platform Sign on URL where you can initiate the login flow.
152+
153+
* Go to Informatica Platform Sign-on URL directly and initiate the login flow from there.
154+
155+
#### IDP initiated:
156+
157+
* Click on **Test this application** in Azure portal and you should be automatically signed in to the Informatica Platform for which you set up the SSO.
158+
159+
You can also use Microsoft My Apps to test the application in any mode. When you click the Informatica Platform tile in the My Apps, if configured in SP mode you would be redirected to the application sign on page for initiating the login flow and if configured in IDP mode, you should be automatically signed in to the Informatica Platform for which you set up the SSO. For more information about the My Apps, see [Introduction to the My Apps](../user-help/my-apps-portal-end-user-access.md).
160+
161+
## Next steps
162+
163+
Once you configure Informatica Platform you can enforce session control, which protects exfiltration and infiltration of your organization’s sensitive data in real time. Session control extends from Conditional Access. [Learn how to enforce session control with Microsoft Cloud App Security](/cloud-app-security/proxy-deployment-aad).

‎articles/active-directory/saas-apps/toc.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1086,6 +1086,8 @@
10861086
href: inforretailinformationmanagement-tutorial.md
10871087
- name: InformaCast
10881088
href: informacast-tutorial.md
1089+
- name: Informatica Platform
1090+
href: informatica-platform-tutorial.md
10891091
- name: Inkling
10901092
href: inkling-tutorial.md
10911093
- name: Innotas

‎articles/applied-ai-services/form-recognizer/concept-model-overview.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,10 +22,12 @@ Azure Form Recognizer prebuilt models enable you to add intelligent document pro
2222

2323
| **Model** | **Description** |
2424
| --- | --- |
25+
|**Document analysis**||
2526
| 🆕[Read (preview)](#read-preview) | Extract printed and handwritten text lines, words, locations, and detected languages.|
27+
| 🆕[General document (preview)](#general-document-preview) | Extract text, tables, structure, key-value pairs, and named entities.|
28+
| [Layout](#layout) | Extract text and layout information from documents.|
29+
|**Prebuilt**||
2630
| 🆕[W-2 (preview)](#w-2-preview) | Extract employee, employer, wage information, etc. from US W-2 forms. |
27-
| 🆕[General document (preview)](#general-document-preview) | Extract text, tables, structure, key-value pairs, and named entities. |
28-
| [Layout](#layout) | Extracts text and layout information from documents. |
2931
| [Invoice](#invoice) | Extract key information from English and Spanish invoices. |
3032
| [Receipt](#receipt) | Extract key information from English receipts. |
3133
| [ID document](#id-document) | Extract key information from US driver licenses and international passports. |

0 commit comments

Comments
 (0)