fix links

Author: msmimart

articles/active-directory/manage-apps/what-is-application-proxy.md

@@ -96,7 +96,7 @@ App Proxy also supports the following authentication protocols with third-party
 * [**Forms- or password-based authentication**](application-proxy-configure-single-sign-on-password-vaulting.md). With this authentication method, users sign on to the application with a username and password the first time they access it. After the first sign-on, Azure AD supplies the username and password to the application. In this scenario, authentication is handled by Azure AD.
 * [**SAML authentication**](application-proxy-configure-single-sign-on-on-premises-apps.md). SAML-based single sign-on is supported for applications that use either SAML 2.0 or WS-Federation protocols. With SAML single sign-on, Azure AD authenticates to the application by using the user's Azure AD account.
 
-For more information on supported methods, see [Choosing a single sign-on method](what-is-single-sign-on#choosing-a-single-sign-on-method.md).
+For more information on supported methods, see [Choosing a single sign-on method](what-is-single-sign-on.md#choosing-a-single-sign-on-method).
 
 ### Security benefits
 
@@ -141,7 +141,7 @@ The following diagram illustrates in general how Azure AD authentication service
 |Active Directory (AD)|Active Directory runs on-premises to perform authentication for domain accounts. When single sign-on is configured, the connector communicates with AD to perform any additional authentication required.|
 |On-premises application|Finally, the user is able to access an on-premises application.|
 
-Azure AD Application Proxy consists of the cloud-based Application Proxy service and an on-premises connector. The connector listens for requests from the Application Proxy service and handles connections to the internal applications. It's important to note that all communications occur over SSL, and always originate at the connector to the Application Proxy service. That is, communications are outbound only. The connector uses a client certificate to authenticate to the Application Proxy service for all calls. The only exception to the connection security is the initial setup step where the client certificate is established. See the Application Proxy [Under the hood](application-proxy-security#under-the-hood.md) for more details.
+Azure AD Application Proxy consists of the cloud-based Application Proxy service and an on-premises connector. The connector listens for requests from the Application Proxy service and handles connections to the internal applications. It's important to note that all communications occur over SSL, and always originate at the connector to the Application Proxy service. That is, communications are outbound only. The connector uses a client certificate to authenticate to the Application Proxy service for all calls. The only exception to the connection security is the initial setup step where the client certificate is established. See the Application Proxy [Under the hood](application-proxy-security.md#under-the-hood) for more details.
 
 ### Application Proxy Connectors