Merge pull request #209039 from MicrosoftDocs/main

8/24 PM Publish

Author: huypub

articles/active-directory/fundamentals/security-operations-introduction.md

@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.workload: identity
 ms.subservice: fundamentals
 ms.topic: overview
-ms.date: 04/29/2022
+ms.date: 08/24/2022
 ms.author: jricketts
 ms.custom:
   - it-pro

articles/active-directory/fundamentals/toc.yml

@@ -6,30 +6,136 @@ items:
   items:
   - name: What is Azure Active Directory?
     href: active-directory-whatis.md
-  - name: Compare Azure AD with ADDS
-    href: active-directory-compare-azure-ad-to-ad.md
-  - name: What's new in Azure Active Directory
-    href: whats-new.md
-- name: Quickstarts
+- name: First steps
   expanded: true
   items:
-  - name: Access the portal and create a tenant
+  - name: Create a Directory
     href: active-directory-access-create-new-tenant.md
-  - name: View your groups with assigned members
-    href: active-directory-groups-view-azure-portal.md
-- name: Concepts
-  expanded: true
+  - name: Add a custom domain name
+    href: add-custom-domain.md
+  - name: Associate an Azure subscription
+    href: active-directory-how-subscriptions-associated-directory.md
+  - name: Add your privacy info
+    href: active-directory-properties-area.md
+  - name: Add company branding
+    href: customize-branding.md
+  - name: Configure 'Stay signed in?'
+    href: keep-me-signed-in.md
+- name: Users, groups, and licenses
+  expanded: false
   items:
-  - name: Groups and users
+  - name: Create or delete a user
+    href: add-users-azure-active-directory.md
+  - name: Create or delete a group
+    href: active-directory-groups-create-azure-portal.md
+  - name: Apply licenses to users
+    href: license-users-groups.md
+  - name: Manage users
+    expanded: false
+    items: 
+    - name: Update user info
+      href: active-directory-users-profile-azure-portal.md
+    - name: Assign roles to users
+      href: active-directory-users-assign-role-azure-portal.md
+    - name: Reset a user's password
+      href: active-directory-users-reset-password-azure-portal.md
+    - name: Restore a deleted user
+      href: active-directory-users-restore.md
+    - name: Default user permissions
+      href: users-default-permissions.md
+  - name: Manage groups
+    expanded: false
     items:
+    - name: Update group membership
+      href: active-directory-groups-members-azure-portal.md
+    - name: Update group ownership
+      href: active-directory-accessmanagement-managing-group-owners.md
+    - name: Delete a group and its members
+      href: active-directory-groups-delete-group.md
     - name: Groups and access management
       href: active-directory-manage-groups.md
+    - name: View your groups with assigned members
+      href: active-directory-groups-view-azure-portal.md
+    - name: Add or remove a group from another group
+      href: active-directory-groups-membership-azure-portal.md
+    - name: Edit group information
+      href: active-directory-groups-settings-azure-portal.md
+    - name: Manage access to resources with groups
+      href: active-directory-manage-groups.md
+  - name: Manage licenses
+    expanded: false
+    items: 
     - name: Group-based licensing
       href: active-directory-licensing-whatis-azure-portal.md
-    - name: Default user permissions
-      href: users-default-permissions.md
+    - name: Sign up for Azure AD Premium
+      href: active-directory-get-started-premium.md 
+- name: Quick security wins
+  expanded: false
+  items:
+  - name: Enable MFA
+    href: concept-fundamentals-mfa-get-started.md
+  - name: Identity secure score
+    href: identity-secure-score.md
+  - name: Secure remote workers
+    href: concept-secure-remote-workers.md
+  - name: Integrating all your apps with Azure AD
+    href: five-steps-to-full-application-integration-with-azure-ad.md
+  - name: Deployment 30, 90, and beyond
+    href: active-directory-deployment-checklist-p2.md
+  - name: Security defaults
+    href: concept-fundamentals-security-defaults.md
+  - name: Block less secure authentications
+    href: ../conditional-access/block-legacy-authentication.md?toc=/azure/active-directory/fundamentals/toc.json
+- name: Support and help
+  expanded: false
+  items:
+  - name: Support and help options for Azure AD
+    href: support-help-options.md
+  - name: Find your tenant ID
+    href: active-directory-how-to-find-tenant.md
+  - name: Get support for Azure Active Directory
+    href: active-directory-troubleshooting-support-howto.md
+- name: Reference
+  expanded: false
+  items:
+  - name: What's new?
+    expanded: false
+    items:
+    - name: What's new in Azure Active Directory
+      href: whats-new.md
+    - name: Archive for What's new? in Azure AD
+      href: whats-new-archive.md
+  - name: Frequently asked questions
+    href: active-directory-faq.yml
+  - name: Compliance
+    expanded: false
+    items:
+    - name: Identity data storage for Europe
+      href: active-directory-data-storage-eu.md
+    - name: Customer data storage for Australia and New Zealand
+      href: active-directory-data-storage-australia.md
+    - name: Identity data storage for Australia and New Zealand
+      href: active-directory-data-storage-australia-newzealand.md
+    - name: Identity data storage for Japan
+      href: active-directory-data-storage-japan.md
+  - name: Compare Azure AD with AD DS
+    href: active-directory-compare-azure-ad-to-ad.md
   - name: Custom security attributes
-    href: custom-security-attributes-overview.md
+    expanded: false
+    items:
+    - name: What are custom security attributes
+      href: custom-security-attributes-overview.md
+    - name: Add or deactivate attributes
+      href: custom-security-attributes-add.md
+    - name: Manage access to attributes
+      href: custom-security-attributes-manage.md
+    - name: Troubleshoot attributes
+      href: custom-security-attributes-troubleshoot.md
+  - name: Frontline worker management
+    href: frontline-worker-management.md
+- name: Identity architecture and deployment
+  expanded: false
+  items:
   - name: Architecture
     items:
     - name: Azure AD architecture
@@ -46,8 +152,6 @@ items:
         href: road-to-the-cloud-implement.md
       - name: Transition to the cloud
         href: road-to-the-cloud-migrate.md
-    - name: Integrating all your apps with Azure AD
-      href: five-steps-to-full-application-integration-with-azure-ad.md
     - name: Parallel identity options
       href: azure-active-directory-parallel-identity-options.md
     - name: Multi-tenant user management
@@ -79,15 +183,15 @@ items:
       - name: Remote desktop gateway authentication
         href: auth-remote-desktop-gateway.md
       - name: SAML authentication
-        href: auth-saml.md  
+        href: auth-saml.md
       - name: SSH authentication
         href: auth-ssh.md
       - name: Windows authentication - KCD
         href: auth-kcd.md
       - name: Directory synchronization
         href: sync-directory.md
       - name: LDAP synchronization
-        href: sync-ldap.md                
+        href: sync-ldap.md
       - name: SCIM synchronization
         href: sync-scim.md
     - name: Recoverability
@@ -109,7 +213,7 @@ items:
         - name: Credential management
           href: resilience-in-credentials.md
         - name: Device states
-          href: resilience-with-device-states.md     
+          href: resilience-with-device-states.md
         - name: Continuous access evaluation
           href: resilience-with-continuous-access-evaluation.md
         - name: External user authentication
@@ -139,7 +243,7 @@ items:
         - name: Daemon applications
           href: resilience-daemon-app.md
         - name: OpenID Connect metadata refresh
-          href: ../develop/howto-build-services-resilient-to-metadata-refresh.md
+          href: ../develop/howto-build-services-resilient-to-metadata-refresh.md?toc=/azure/active-directory/fundamentals/toc.json
       - name: Monitor application health for resilience
         href: monitor-sign-in-health-for-resilience.md
     - name: Certificate authorities used in Azure
@@ -160,14 +264,10 @@ items:
         href: secure-with-azure-ad-best-practices.md
   - name: Deployment guide
     items:
-    - name: Deployment 30, 90, and beyond
-      href: active-directory-deployment-checklist-p2.md
     - name: Azure Active Directory deployment plans
       href: active-directory-deployment-plans.md
     - name: Azure Active Directory B2C deployment plans
       href: azure-active-directory-b2c-deployment-plans.md
-  - name: Frontline worker management
-    href: frontline-worker-management.md
   - name: Azure AD Operations reference
     items:
     - name: Introduction
@@ -201,7 +301,7 @@ items:
       - name: Security operations for Infrastructure
         href: security-operations-infrastructure.md
     - name: Protect Microsoft 365 from on-premises attacks 
-      href: protect-m365-from-on-premises-attacks.md    
+      href: protect-m365-from-on-premises-attacks.md
     - name: Secure external collaboration
       items:
       - name: Secure external access overview 
@@ -233,7 +333,7 @@ items:
       - name: Secure service principals
         href: service-accounts-principal.md
       - name: Govern Azure service accounts
-        href: service-accounts-governing-azure.md       
+        href: service-accounts-governing-azure.md
       - name: Introduction to on-premises service accounts
         href: service-accounts-on-premises.md
       - name: Secure group MSAs
@@ -246,91 +346,3 @@ items:
         href: service-accounts-user-on-premises.md
       - name: Govern on-premises user service accounts
         href: service-accounts-govern-on-premises.md
-    - name: Enable MFA
-      href: concept-fundamentals-mfa-get-started.md
-    - name: Security defaults
-      href: concept-fundamentals-security-defaults.md
-    - name: Block legacy authentication
-      href: ../conditional-access/block-legacy-authentication.md
-    - name: Identity secure score
-      href: identity-secure-score.md
-    - name: Secure remote workers
-      href: concept-secure-remote-workers.md
-- name: How-to guides
-  expanded: true
-  items:
-  - name: Organization
-    items:
-    - name: Sign up for Azure AD as an organization
-      href: sign-up-organization.md
-    - name: Sign up for Azure AD Premium
-      href: active-directory-get-started-premium.md    
-    - name: Add a custom domain name
-      href: add-custom-domain.md
-    - name: Add company branding
-      href: customize-branding.md
-    - name: Add your privacy info
-      href: active-directory-properties-area.md
-    - name: Configure 'Stay signed in?'
-      href: keep-me-signed-in.md
-    - name: Associate an Azure subscription
-      href: active-directory-how-subscriptions-associated-directory.md
-  - name: Users
-    items:
-    - name: Add or delete a new user
-      href: add-users-azure-active-directory.md
-    - name: Add or change user profile info
-      href: active-directory-users-profile-azure-portal.md
-    - name: Reset a user's password
-      href: active-directory-users-reset-password-azure-portal.md
-    - name: Assign roles to users
-      href: active-directory-users-assign-role-azure-portal.md
-    - name: Assign or remove licenses from users
-      href: license-users-groups.md
-    - name: Restore a deleted user
-      href: active-directory-users-restore.md
-  - name: Groups
-    items:
-    - name: Create a group and add members
-      href: active-directory-groups-create-azure-portal.md
-    - name: Add or remove group members
-      href: active-directory-groups-members-azure-portal.md
-    - name: Delete a group and its members
-      href: active-directory-groups-delete-group.md
-    - name: Add or remove a group from another group
-      href: active-directory-groups-membership-azure-portal.md
-    - name: Edit group information
-      href: active-directory-groups-settings-azure-portal.md
-    - name: Add or remove group owners
-      href: active-directory-accessmanagement-managing-group-owners.md
-    - name: Manage access to resources with groups
-      href: active-directory-manage-groups.md
-  - name: Custom security attributes
-    items:
-    - name: Add or deactivate attributes
-      href: custom-security-attributes-add.md
-    - name: Manage access to attributes
-      href: custom-security-attributes-manage.md
-    - name: Troubleshoot attributes
-      href: custom-security-attributes-troubleshoot.md
-- name: Troubleshooting
-  expanded: true
-  items:
-  - name: How to find tenant ID
-    href: active-directory-how-to-find-tenant.md
-  - name: Get support for Azure Active Directory
-    href: active-directory-troubleshooting-support-howto.md
-  - name: Support and help options for Azure AD
-    href: support-help-options.md
-- name: Reference
-  items:
-  - name: Archive for What's new? in Azure AD
-    href: whats-new-archive.md
-  - name: Data storage
-    items:
-    - name: Identity data storage for Europe
-      href: active-directory-data-storage-eu.md
-    - name: Identity data storage for Australia and New Zealand
-      href: active-directory-data-storage-australia-newzealand.md
-    - name: Identity data storage for Japan
-      href: active-directory-data-storage-japan.md

articles/active-directory/manage-apps/home-realm-discovery-policy.md

@@ -8,8 +8,9 @@ ms.service: active-directory
 ms.subservice: app-mgmt
 ms.topic: conceptual
 ms.workload: identity
-ms.date: 02/09/2021
+ms.date: 08/24/2022
 ms.author: ludwignick
+ms.reviewer: sreyanth
 
 ---
 # Home Realm Discovery for an application

articles/aks/TOC.yml

@@ -25,6 +25,9 @@
           href: learn/quick-kubernetes-deploy-powershell.md
         - name: Use the Azure portal
           href: learn/quick-kubernetes-deploy-portal.md
+        - name: Use Bicep
+          displayName: Resource Manager,arm,template
+          href: learn/quick-kubernetes-deploy-bicep.md
         - name: Use ARM template
           displayName: Resource Manager
           href: learn/quick-kubernetes-deploy-rm-template.md
@@ -96,7 +99,7 @@
     - name: Service meshes
       href: servicemesh-about.md
     - name: Sustainable software engineering
-      href: concepts-sustainable-software-engineering.md      
+      href: concepts-sustainable-software-engineering.md
     - name: Dapr
       href: dapr-overview.md
     - name: GitOps
@@ -265,7 +268,7 @@
             - name: Create service principal
               href: kubernetes-service-principal.md
             - name: Use managed identities
-              href: use-managed-identity.md 
+              href: use-managed-identity.md
             - name: Limit access to cluster configuration file
               href: control-kubeconfig-access.md
             - name: Define API server authorized IP ranges
@@ -308,7 +311,7 @@
             - name: Use Azure AD pod identity (preview)
               href: use-azure-ad-pod-identity.md
             - name: Secure pod traffic with network policies
-              href: use-network-policies.md  
+              href: use-network-policies.md
             - name: Use pod security policies (preview)
               href: use-pod-security-policies.md
             - name: Use Pod Security Admission
@@ -322,7 +325,7 @@
                 - name: Configure TLS for NGINX ingress controller
                   href: csi-secrets-store-nginx-tls.md
                 - name: Troubleshooting
-                  href: csi-secrets-store-troubleshooting.md        
+                  href: csi-secrets-store-troubleshooting.md
     - name: Configure private clusters
       items:
       - name: Create a private cluster
@@ -371,7 +374,7 @@
             - name: Use a user defined route for egress
               href: egress-outboundtype.md
             - name: Managed NAT Gateway
-              href: nat-gateway.md              
+              href: nat-gateway.md
         - name: Customize CoreDNS
           href: coredns-custom.md
     - name: Configure storage