Merge branch 'main' of https://github.com/MicrosoftDocs/azure-docs-pr into sovUp

Author: roygara

articles/active-directory/develop/workload-identity-federation.md

@@ -57,12 +57,12 @@ The workflow for exchanging an external token for an access token is the same, h
 1. When the checks are satisfied, Microsoft identity platform issues an access token to the external workload.
 1. The external workload accesses Azure AD protected resources using the access token from Microsoft identity platform. A GitHub Actions workflow, for example, uses the access token to publish a web app to Azure App Service.
 
-The Microsoft identity platform stores only the first 25 signing keys when they're downloaded from the external IdP's OIDC endpoint. If the external IdP exposes more than 25 signing keys, you may experience errors when using Workload Identity Federation.
+The Microsoft identity platform stores only the first 100 signing keys when they're downloaded from the external IdP's OIDC endpoint. If the external IdP exposes more than 100 signing keys, you may experience errors when using Workload Identity Federation.
 
 ## Next steps
 Learn more about how workload identity federation works:
 - How Azure AD uses the [OAuth 2.0 client credentials grant](v2-oauth2-client-creds-grant-flow.md#third-case-access-token-request-with-a-federated-credential) and a client assertion issued by another IdP to get a token.
 - How to create, delete, get, or update [federated identity credentials](workload-identity-federation-create-trust.md) on an app registration.
 - How to create, delete, get, or update [federated identity credentials](workload-identity-federation-create-trust-user-assigned-managed-identity.md) on a user-assigned managed identity.
 - Read the [GitHub Actions documentation](https://docs.github.com/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-azure) to learn more about configuring your GitHub Actions workflow to get an access token from Microsoft identity provider and access Azure resources.
-- For information about the required format of JWTs created by external identity providers, read about the [assertion format](active-directory-certificate-credentials.md#assertion-format).
+- For information about the required format of JWTs created by external identity providers, read about the [assertion format](active-directory-certificate-credentials.md#assertion-format).

articles/active-directory/fundamentals/5-secure-access-b2b.md

@@ -171,6 +171,7 @@ You can roll out these options:
 - **Pass-through authentication** + **Seamless SSO**
 - **Not supported** - **Password hash sync** + **Pass-through authentication** + **Seamless SSO**
 - **Certificate-based authentication settings**
+- **Azure multifactor authentication**
 
 To configure Staged Rollout, follow these steps:
 

articles/active-directory/hybrid/how-to-connect-staged-rollout.md

@@ -114,7 +114,7 @@ The following example demonstrates how to mount a Blob storage container as a pe
     kubectl create -f pv-blob-nfs.yaml
     ```
 
-3. Create a `pvc-blob-nfs.yaml` file with a *PersistentVolume*. For example:
+3. Create a `pvc-blob-nfs.yaml` file with a *PersistentVolumeClaim*. For example:
 
     ```yml
     kind: PersistentVolumeClaim

articles/aks/azure-csi-blob-storage-static.md

@@ -3,7 +3,7 @@ title: Azure Functions error handling and retry guidance
 description: Learn to handle errors and retry events in Azure Functions with links to specific binding errors, including information on retry policies.
 
 ms.topic: conceptual
-ms.date: 08/03/2022
+ms.date: 01/03/2023
 zone_pivot_groups: programming-languages-set-functions-lang-workers
 ---
 
@@ -49,7 +49,7 @@ There are two kinds of retries available for your functions: built-in retry beha
 
 | Trigger/binding | Retry source | Configuration | 
 | ---- | ---- | ----- | 
-| Azure Cosmos DB | n/a | Not configurable |
+| Azure Cosmos DB | [Retry policies](#retry-policies) | Function-level |
 | Blob Storage | [Binding extension](functions-bindings-storage-blob-trigger.md#poison-blobs) |  [host.json](functions-bindings-storage-queue.md#host-json) |
 | Event Grid | [Binding extension](../event-grid/delivery-and-retry.md) | Event subscription | 
 | Event Hubs | [Retry policies](#retry-policies) | Function-level |