Skip to content

Commit 3e0ed9f

Browse files
committed
Graph scrub on saas apps
1 parent b974fa2 commit 3e0ed9f

File tree

4 files changed

+29
-29
lines changed

4 files changed

+29
-29
lines changed

articles/active-directory/saas-apps/alibaba-cloud-service-role-based-sso-tutorial.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -164,7 +164,7 @@ the **Note** field, click **Upload** to upload the federation metadata file you
164164
7. Associate the Alibaba Cloud RAM role (AADrole) with the Azure AD user (u2):
165165
To associate the RAM role with the Azure AD user, you must create a role in Azure AD by following these steps:
166166

167-
a. Sign on to the [Azure AD Graph Explorer](https://developer.microsoft.com/graph/graph-explorer?spm=a2c63.p38356.879954.9.7d904e167h6Yg9).
167+
a. Sign on to the [Microsoft Graph Explorer](https://developer.microsoft.com/graph/graph-explorer).
168168

169169
b. Click **modify permissions** to obtain required permissions for creating a role.
170170

articles/active-directory/saas-apps/aws-multi-accounts-tutorial.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ If you want to know more details about SaaS app integration with Azure AD, see [
3838
3939
**Please note that we do not recommend to use this approach for following reasons:**
4040

41-
* You have to use the Graph Explorer approach to patch all the roles to the app. We don’t recommend using the manifest file approach.
41+
* You have to use the Microsoft Graph Explorer approach to patch all the roles to the app. We don’t recommend using the manifest file approach.
4242

4343
* We have seen customers reporting that after adding ~1200 app roles for a single AWS app, any operation on the app started throwing the errors related to size. There is a hard limit of size on the application object.
4444

@@ -243,7 +243,7 @@ In this section, you enable Azure AD single sign-on in the Azure portal and conf
243243

244244
16. Perform the above step for all the roles in all the accounts and store all of them in format **Role ARN,Trusted entities** in a notepad.
245245

246-
17. Open [Azure AD Graph Explorer](https://developer.microsoft.com/graph/graph-explorer) in another window.
246+
17. Open [Microsoft Graph Explorer](https://developer.microsoft.com/graph/graph-explorer) in another window.
247247

248248
a. Sign in to the Graph Explorer site using the Global Admin/Co-admin credentials for your tenant.
249249

@@ -322,7 +322,7 @@ In this section, you enable Azure AD single sign-on in the Azure portal and conf
322322
> [!Note]
323323
> You can only add new roles after the **msiam_access** for the patch operation. Also, you can add as many roles as you want per your Organization need. Azure AD will send the **value** of these roles as the claim value in SAML response.
324324
325-
j. Go back to your Graph Explorer and change the method from **GET** to **PATCH**. Patch the Service Principal object to have desired roles by updating appRoles property similar to the one shown above in the example. Click **Run Query** to execute the patch operation. A success message confirms the creation of the role for your Amazon Web Services application.
325+
j. Go back to Graph Explorer and change the method from **GET** to **PATCH**. Patch the Service Principal object to have desired roles by updating appRoles property similar to the one shown above in the example. Click **Run Query** to execute the patch operation. A success message confirms the creation of the role for your Amazon Web Services application.
326326
327327
![Graph explorer dialog box](./media/aws-multi-accounts-tutorial/graph-explorer-new11.png)
328328
@@ -360,7 +360,7 @@ For more information about the Access Panel, see [Introduction to the Access
360360
361361
## Additional resources
362362
363-
* [How to configure provisioning using MS Graph APIs](https://docs.microsoft.com/azure/active-directory/manage-apps/application-provisioning-configure-api)
363+
* [How to configure provisioning using Microsoft Graph APIs](https://docs.microsoft.com/azure/active-directory/manage-apps/application-provisioning-configure-api)
364364
* [List of Tutorials on How to Integrate SaaS Apps with Azure Active Directory](tutorial-list.md)
365365
* [What is application access and single sign-on with Azure Active Directory?](../manage-apps/what-is-single-sign-on.md)
366366

articles/active-directory/saas-apps/sharepoint-on-premises-tutorial.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -329,7 +329,7 @@ Users can now sign into SharePoint 2016 using identities from Azure AD, but ther
329329

330330
There is no validation on the values you search for, which can lead to misspellings or users accidentally choosing the wrong claim type to assign such as the **SurName** claim. This can prevent users from successfully accessing resources.
331331

332-
To assist with this scenario, there is an open-source solution called [AzureCP](https://yvand.github.io/AzureCP/) that provides a custom claims provider for SharePoint 2016. It will use the Azure AD Graph to resolve what users enter and perform validation. Learn more at [AzureCP](https://yvand.github.io/AzureCP/).
332+
To assist with this scenario, there is an open-source solution called [AzureCP](https://yvand.github.io/AzureCP/) that provides a custom claims provider for SharePoint 2016. It will use the Microsoft Graph API to resolve what users enter and perform validation. Learn more at [AzureCP](https://yvand.github.io/AzureCP/).
333333

334334
### Assign the Azure AD Security Group in the Azure portal
335335

0 commit comments

Comments
 (0)