Merging changes synced from https://github.com/MicrosoftDocs/azure-docs-pr (branch live)

Author: Banani-Rath

articles/active-directory/saas-apps/maptician-provisioning-tutorial.md

@@ -0,0 +1,145 @@
+---
+title: 'Tutorial: Configure Maptician for automatic user provisioning with Azure Active Directory | Microsoft Docs'
+description: Learn how to automatically provision and de-provision user accounts from Azure AD to Maptician.
+services: active-directory
+author: twimmers
+writer: twimmers
+manager: beatrizd
+ms.assetid: 15ae5ceb-2113-40f8-8d3f-bf8895ef8f42
+ms.service: active-directory
+ms.subservice: saas-app-tutorial
+ms.workload: identity
+ms.topic: tutorial
+ms.date: 08/11/2021
+ms.author: thwimmer
+---
+
+# Tutorial: Configure Maptician for automatic user provisioning
+
+This tutorial describes the steps you need to perform in both Maptician and Azure Active Directory (Azure AD) to configure automatic user provisioning. When configured, Azure AD automatically provisions and de-provisions users and groups to [Maptician](https://maptician.com/) using the Azure AD Provisioning service. For important details on what this service does, how it works, and frequently asked questions, see [Automate user provisioning and deprovisioning to SaaS applications with Azure Active Directory](../app-provisioning/user-provisioning.md). 
+
+
+## Capabilities Supported
+> [!div class="checklist"]
+> * Create users in Maptician
+> * Remove users in Maptician when they do not require access anymore
+> * Keep user attributes synchronized between Azure AD and Maptician
+> * [Single sign-on](maptician-tutorial.md) to Maptician (recommended).
+
+## Prerequisites
+
+The scenario outlined in this tutorial assumes that you already have the following prerequisites:
+
+* [An Azure AD tenant](../develop/quickstart-create-new-tenant.md) 
+* A user account in Azure AD with [permission](../roles/permissions-reference.md) to configure provisioning (for example, Application Administrator, Cloud Application administrator, Application Owner, or Global Administrator). 
+* A [Maptician](https://maptician.com/) tenant.
+* A user account in Maptician with Admin permissions.
+
+## Step 1. Plan your provisioning deployment
+1. Learn about [how the provisioning service works](../app-provisioning/user-provisioning.md).
+1. Determine who will be in [scope for provisioning](../app-provisioning/define-conditional-rules-for-provisioning-user-accounts.md).
+1. Determine what data to [map between Azure AD and Maptician](../app-provisioning/customize-application-attributes.md). 
+
+## Step 2. Configure Maptician to support provisioning with Azure AD
+
+
+You can begin the process of connecting your Maptician environment to Azure AD provisioning and single sign-on (SSO) by reaching out to the Maptician support team <[email protected]> or directly with your Maptician account manager. You will be provided a document that will contain your  **Tenant URL**, along with a **Secret Token**. Maptician support team members can assist you with setting up this integration and are available to answer any questions about its configuration or use.
+
+## Step 3. Add Maptician from the Azure AD application gallery
+
+Add Maptician from the Azure AD application gallery to start managing provisioning to Maptician. If you have previously setup Maptician for SSO, you can use the same application. However it is recommended that you create a separate app when testing out the integration initially. Learn more about adding an application from the gallery [here](../manage-apps/add-application-portal.md). 
+
+## Step 4. Define who will be in scope for provisioning 
+
+The Azure AD provisioning service allows you to scope who will be provisioned based on assignment to the application and or based on attributes of the user / group. If you choose to scope who will be provisioned to your app based on assignment, you can use the following [steps](../manage-apps/assign-user-or-group-access-portal.md) to assign users and groups to the application. If you choose to scope who will be provisioned based solely on attributes of the user or group, you can use a scoping filter as described [here](../app-provisioning/define-conditional-rules-for-provisioning-user-accounts.md). 
+
+* When assigning users and groups to Maptician, you must select a role other than **Default Access**. Users with the Default Access role are excluded from provisioning and will be marked as not effectively entitled in the provisioning logs. If the only role available on the application is the default access role, you can [update the application manifest](../develop/howto-add-app-roles-in-azure-ad-apps.md) to add more roles. 
+
+* Start small. Test with a small set of users and groups before rolling out to everyone. When scope for provisioning is set to assigned users and groups, you can control it by assigning one or two users or groups to the app. When scope is set to all users and groups, you can specify an [attribute based scoping filter](../app-provisioning/define-conditional-rules-for-provisioning-user-accounts.md). 
+
+
+## Step 5. Configure automatic user provisioning to Maptician 
+
+This section guides you through the steps to configure the Azure AD provisioning service to create, update, and disable users and/or groups in Maptician based on user and/or group assignments in Azure AD.
+
+### To configure automatic user provisioning for Maptician in Azure AD:
+
+1. Sign in to the [Azure portal](https://portal.azure.com). Select **Enterprise Applications**, then select **All applications**.
+
+	![Enterprise applications blade](common/enterprise-applications.png)
+
+1. In the applications list, select **Maptician**.
+
+	![The Maptician link in the Applications list](common/all-applications.png)
+
+1. Select the **Provisioning** tab.
+
+	![Provisioning tab](common/provisioning.png)
+
+1. Set the **Provisioning Mode** to **Automatic**.
+
+	![Provisioning tab automatic](common/provisioning-automatic.png)
+
+1. In the **Admin Credentials** section, input your Maptician **Tenant URL** and **Secret Token**. Click **Test Connection** to ensure Azure AD can connect to Maptician. If the connection fails, ensure your Maptician account has Admin permissions and try again.
+
+	![Token](common/provisioning-testconnection-tenanturltoken.png)
+
+1. In the **Notification Email** field, enter the email address of a person or group who should receive the provisioning error notifications and select the **Send an email notification when a failure occurs** check box.
+
+	![Notification Email](common/provisioning-notification-email.png)
+
+1. Select **Save**.
+
+1. In the **Mappings** section, select **Synchronize Azure Active Directory Users to Maptician**.
+
+1. Review the user attributes that are synchronized from Azure AD to Maptician in the **Attribute-Mapping** section. The attributes selected as **Matching** properties are used to match the user accounts in Maptician for update operations. If you choose to change the [matching target attribute](../app-provisioning/customize-application-attributes.md), you will need to ensure that the Maptician API supports filtering users based on that attribute. Select the **Save** button to commit any changes.
+
+   |Attribute|Type|Supported for filtering|
+   |---|---|---|
+   |userName|String|&check;
+   |emails[type eq "work"].value|String|
+   |active|Boolean|
+   |title|String|
+   |userType|String|
+   |name.givenName|String|
+   |name.familyName|String|
+   |addresses[type eq "work"].locality|String|
+   |addresses[type eq "work"].region|String|
+   |phoneNumbers[type eq "work"].value|String|
+   |phoneNumbers[type eq "mobile"].value|String|
+   |externalId|String|
+   |urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:employeeNumber|String|
+   |urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:organization|String|
+   |urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:department|String|
+
+1. To configure scoping filters, refer to the following instructions provided in the [Scoping filter tutorial](../app-provisioning/define-conditional-rules-for-provisioning-user-accounts.md).
+
+1. To enable the Azure AD provisioning service for Maptician, change the **Provisioning Status** to **On** in the **Settings** section.
+
+	![Provisioning Status Toggled On](common/provisioning-toggle-on.png)
+
+1. Define the users and/or groups that you would like to provision to Maptician by choosing the desired values in **Scope** in the **Settings** section.
+
+	![Provisioning Scope](common/provisioning-scope.png)
+
+1. When you are ready to provision, click **Save**.
+
+	![Saving Provisioning Configuration](common/provisioning-configuration-save.png)
+
+This operation starts the initial synchronization cycle of all users and groups defined in **Scope** in the **Settings** section. The initial cycle takes longer to perform than subsequent cycles, which occur approximately every 40 minutes as long as the Azure AD provisioning service is running. 
+
+## Step 6. Monitor your deployment
+Once you've configured provisioning, use the following resources to monitor your deployment:
+
+* Use the [provisioning logs](../reports-monitoring/concept-provisioning-logs.md) to determine which users have been provisioned successfully or unsuccessfully
+* Check the [progress bar](../app-provisioning/application-provisioning-when-will-provisioning-finish-specific-user.md) to see the status of the provisioning cycle and how close it is to completion
+* If the provisioning configuration seems to be in an unhealthy state, the application will go into quarantine. Learn more about quarantine states [here](../app-provisioning/application-provisioning-quarantine-status.md).  
+
+## More resources
+
+* [Managing user account provisioning for Enterprise Apps](../app-provisioning/configure-automatic-user-provisioning-portal.md)
+* [What is application access and single sign-on with Azure Active Directory?](../manage-apps/what-is-single-sign-on.md)
+
+## Next steps
+
+* [Learn how to review logs and get reports on provisioning activity](../app-provisioning/check-status-user-account-provisioning.md)

articles/active-directory/saas-apps/toc.yml

@@ -2481,6 +2481,8 @@
         href: looop-provisioning-tutorial.md
       - name: LogMeIn
         href: logmein-provisioning-tutorial.md
+      - name: Maptician
+        href: maptician-provisioning-tutorial.md
       - name: MediusFlow
         href: mediusflow-provisioning-tutorial.md
       - name: Merchlogix

articles/azure-portal/azure-portal-dashboards.md

@@ -1,9 +1,8 @@
 ---
 title: Create a dashboard in the Azure portal
 description: This article describes how to create and customize a dashboard in the Azure portal.
-ms.assetid: ff422f36-47d2-409b-8a19-02e24b03ffe7
 ms.topic: how-to
-ms.date: 05/12/2021
+ms.date: 08/19/2021
 ---
 
 # Create a dashboard in the Azure portal
@@ -13,7 +12,7 @@ Dashboards are a focused and organized view of your cloud resources in the Azure
 The Azure portal provides a default dashboard as a starting point. You can edit the default dashboard and create and customize additional dashboards.
 
 > [!NOTE]
-> Each user can create up to 100 private dashboards. If you [publish and share the dashboard](azure-portal-dashboard-share-access.md), it will be implemented as an Azure resource in your subscription and won’t count towards this limit.
+> Each user can create up to 100 private dashboards. If you [publish and share the dashboard](azure-portal-dashboard-share-access.md), it will be implemented as an Azure resource in your subscription and won't count towards this limit.
 
 This article describes how to create a new dashboard and customize it. For information on sharing dashboards, see [Share Azure dashboards by using Azure role-based access control](azure-portal-dashboard-share-access.md).
 
@@ -25,11 +24,11 @@ This example shows how to create a new private dashboard with an assigned name.
 
 1. From the Azure portal menu, select **Dashboard**. Your default view might already be set to dashboard.
 
-    ![Screenshot of the Azure portal with Dashboard selected.](./media/azure-portal-dashboards/portal-menu-dashboard.png)
+    :::image type="content" source="media/azure-portal-dashboards/portal-menu-dashboard.png" alt-text="Screenshot of the Azure portal with Dashboard selected.":::
 
 1. Select **New dashboard** then **Blank dashboard**.
 
-    ![Screenshot of the New dashboard options.](./media/azure-portal-dashboards/create-new-dashboard.png)
+    :::image type="content" source="media/azure-portal-dashboards/create-new-dashboard.png" alt-text="Screenshot of the New dashboard options.":::
 
     This action opens the **Tile Gallery**, from which you can select tiles, and an empty grid where you'll arrange the tiles.
 
@@ -51,7 +50,7 @@ To add tiles to a dashboard, follow these steps:
 
 1. Select ![edit icon](./media/azure-portal-dashboards/dashboard-edit-icon.png) **Edit** from the dashboard's page header.
 
-    ![Screenshot of dashboard highlighting the Edit option.](./media/azure-portal-dashboards/dashboard-edit.png)
+    :::image type="content" source="media/azure-portal-dashboards/dashboard-edit.png" alt-text="Screenshot of dashboard highlighting the Edit option.":::
 
 1. Browse the **Tile Gallery** or use the search field to find a certain tile. Select the tile you want to add to your dashboard.
 
@@ -126,7 +125,7 @@ If you set filters for a particular tile, the left corner of that tile displays
 
 Some tiles might require more configuration to show the information you want. For example, the **Metrics chart** tile has to be set up to display a metric from Azure Monitor. You can also customize tile data to override the dashboard's default time settings and filters.
 
-## Complete tile configuration
+### Complete tile configuration
 
 Any tile that needs to be set up displays a banner until you customize the tile. For example, in the **Metrics chart**, the banner reads **Edit in Metrics**. Other banners may use different text, such as **Configure tile**.
 
@@ -136,26 +135,36 @@ To customize the tile:
 
 1. Select the banner, then do the required setup.
 
-    ![Screenshot of tile that requires configuration.](./media/azure-portal-dashboards/dashboard-configure-tile.png)
+    :::image type="content" source="media/azure-portal-dashboards/dashboard-configure-tile.png" alt-text="Screenshot of tile that requires configuration.":::
 
 ### Customize time span for a tile
 
 Data on the dashboard shows activity and refreshes based on the global filters. Some tiles will allow you to select a different time span for just one tile. To do so, follow these steps:
 
 1. Select **Customize tile data** from the context menu or from the ![filter icon](./media/azure-portal-dashboards/dashboard-filter.png) in the upper left corner of the tile.
 
-    ![Screenshot of tile context menu.](./media/azure-portal-dashboards/dashboard-customize-tile-data.png)
+    :::image type="content" source="media/azure-portal-dashboards/dashboard-customize-tile-data.png" alt-text="Screenshot of tile context menu.":::
 
 1. Select the checkbox to **Override the dashboard time settings at the tile level**.
 
-    ![Screenshot of dialog to configure tile time settings.](./media/azure-portal-dashboards/dashboard-override-time-settings.png)
+    :::image type="content" source="media/azure-portal-dashboards/dashboard-override-time-settings.png" alt-text="Screenshot of dialog to configure tile time settings.":::
 
 1. Choose the time span to show for this tile. You can choose from the past 30 minutes to the past 30 days or define a custom range.
 
 1. Choose the time granularity to display.  You can show anywhere from one-minute increments to one-month.
 
 1. Select **Apply**.
 
+### Change the title and subtitle of a tile
+
+Some tiles allow you to edit their title and subtitle. To do so, select **Configure tile settings** from the context menu.
+
+:::image type="content" source="media/azure-portal-dashboards/dashboard-tile-rename.png" alt-text="Screenshot showing the Configure tile settings option.":::
+
+Make any changes to the tile's title and/or subtitle, then select **Apply**.
+
+:::image type="content" source="media/azure-portal-dashboards/dashboard-title-subtitle.png" alt-text="Screenshot showing how to change the title and subtitle for a tile.":::
+ 
 ## Delete a tile
 
 To remove a tile from a dashboard, do one of the following:
@@ -164,7 +173,7 @@ To remove a tile from a dashboard, do one of the following:
 
 - Select ![edit icon](./media/azure-portal-dashboards/dashboard-edit-icon.png) **Edit** to enter customization mode. Hover in the upper right corner of the tile, then select the ![delete icon](./media/azure-portal-dashboards/dashboard-delete-icon.png) delete icon to remove the tile from the dashboard.
 
-   ![Screenshot showing how to remove tile from dashboard.](./media/azure-portal-dashboards/dashboard-delete-tile.png)
+    :::image type="content" source="media/azure-portal-dashboards/dashboard-delete-tile.png" alt-text="Screenshot showing how to remove tile from dashboard.":::
 
 ## Clone a dashboard
 
@@ -190,11 +199,11 @@ To find and open a shared dashboard, follow these steps:
 
     1. select **Browse all dashboards**.
 
-        ![Screenshot of dashboard selection menu](./media/azure-portal-dashboards/dashboard-browse.png)
+        :::image type="content" source="media/azure-portal-dashboards/dashboard-browse.png" alt-text="Screenshot of dashboard selection menu.":::
 
     1. In the **Type** field, select **Shared dashboards**.
 
-        ![Screenshot of all dashboards selection menu](./media/azure-portal-dashboards/dashboard-browse-all.png)
+        :::image type="content" source="media/azure-portal-dashboards/dashboard-browse-all.png" alt-text="Screenshot of all dashboards selection menu.":::
 
     1. Select one or more subscriptions. You can also enter text to filter dashboards by name.
 
@@ -210,7 +219,7 @@ To permanently delete a private or shared dashboard, follow these steps:
 
 1. For a private dashboard, select **OK** on the confirmation dialog to remove the dashboard. For a shared dashboard, on the confirmation dialog, select the checkbox to confirm that the published dashboard will no longer be viewable by others. Then, select **OK**.
 
-    ![Screenshot of delete confirmation.](./media/azure-portal-dashboards/dashboard-delete-dash.png)
+    :::image type="content" source="media/azure-portal-dashboards/dashboard-delete-dash.png" alt-text="Screenshot of delete confirmation.":::
 
 ## Recover a deleted dashboard
 

articles/azure-portal/media/azure-portal-dashboards/dashboard-title-subtitle.png

@@ -265,10 +265,10 @@ For a script example, see [Configure auditing and threat detection using PowerSh
 
 **REST API**:
 
-- [Create or Update Database Auditing Policy](/rest/api/sql/database%20auditing%20settings/createorupdate)
+- [Create or Update Database Auditing Policy](/rest/api/sql/2017-03-01-preview/server-auditing-settings/create-or-update)
 - [Create or Update Server Auditing Policy](/rest/api/sql/server%20auditing%20settings/createorupdate)
 - [Get Database Auditing Policy](/rest/api/sql/database%20auditing%20settings/get)
-- [Get Server Auditing Policy](/rest/api/sql/server%20auditing%20settings/get)
+- [Get Server Auditing Policy](/rest/api/sql/2017-03-01-preview/server-auditing-settings/get) 
 
 Extended policy with WHERE clause support for additional filtering:
 
@@ -297,4 +297,4 @@ You can manage Azure SQL Database auditing using [Azure Resource Manager](../../
 
 - Data Exposed episode [What's New in Azure SQL Auditing](https://channel9.msdn.com/Shows/Data-Exposed/Whats-New-in-Azure-SQL-Auditing) on Channel 9.
 - [Auditing for SQL Managed Instance](../managed-instance/auditing-configure.md)
-- [Auditing for SQL Server](/sql/relational-databases/security/auditing/sql-server-audit-database-engine)
+- [Auditing for SQL Server](/sql/relational-databases/security/auditing/sql-server-audit-database-engine)