Merge branch 'master' of https://github.com/MicrosoftDocs/azure-docs-pr into nitinme-quick-update

Author: nitinme

.whatsnew/.active-directory-b2c.json

@@ -7,7 +7,7 @@
         "relativeLinkPrefix": "/azure/active-directory-b2c"
     },
     "inclusionCriteria": {
-        "excludePullRequestTitles": true,
+        "omitPullRequestTitles" : true,
         "minAdditionsToFile" : 10,
         "maxFilesChanged": 50,
         "labels": [
@@ -17,7 +17,7 @@
     },
     "areas": [
         {
-            "name": ".",
+            "names": [ "."],
             "heading": "Azure Active Directory business-to-customer (B2C)"
         }
     ]

articles/active-directory-b2c/whats-new-docs.md

@@ -1,7 +1,7 @@
 ---
 title: "What's new in Azure Active Directory business-to-customer (B2C)"
 description: "New and updated documentation for the Azure Active Directory business-to-customer (B2C)."
-ms.date: 10/05/2021
+ms.date: 11/02/2021
 ms.service: active-directory
 ms.subservice: B2C
 ms.topic: reference
@@ -15,6 +15,39 @@ manager: CelesteDG
 
 Welcome to what's new in Azure Active Directory B2C documentation. This article lists new docs that have been added and those that have had significant updates in the last three months. To learn what's new with the B2C service, see [What's new in Azure Active Directory](../active-directory/fundamentals/whats-new.md).
 
+
+## October 2021
+
+### New articles
+
+- [Tutorial: Configure IDEMIA with Azure Active Directory B2C for relying party to consume IDEMIA or US State issued mobile identity credentials (Preview)](partner-idemia.md)
+- [Tutorial: Extend Azure Active Directory B2C to protect on-premises applications using F5 BIG-IP](partner-f5.md)
+- [Roles and resource access control](roles-resource-access-control.md)
+- [Supported Azure AD features](supported-azure-ad-features.md)
+
+### Updated articles
+
+- [Tutorial: Create user flows and custom policies in Azure Active Directory B2C](tutorial-create-user-flows.md)
+- [Customize the user interface in Azure Active Directory B2C](customize-ui.md)
+- [Tutorial: Extend Azure Active Directory B2C to protect on-premises applications using F5 BIG-IP](partner-f5.md)
+- [Set up sign-up and sign-in with generic OpenID Connect using Azure Active Directory B2C](identity-provider-generic-openid-connect.md)
+- [RelyingParty](relyingparty.md)
+- [Customize the user interface with HTML templates in Azure Active Directory B2C](customize-ui-with-html.md)
+- [Collect Azure Active Directory B2C logs with Application Insights](troubleshoot-with-application-insights.md)
+- [Troubleshoot Azure AD B2C custom policies and user flows](troubleshoot.md)
+- [Define custom attributes in Azure Active Directory B2C](user-flow-custom-attributes.md)
+- [Tutorial: Configure security analytics for Azure Active Directory B2C data with Azure Sentinel](azure-sentinel.md)
+- [What is Azure Active Directory B2C?](overview.md)
+- [Quickstart: Set up sign in for a single-page app using Azure Active Directory B2C](quickstart-single-page-app.md)
+- [Quickstart: Set up sign in for an ASP.NET application using Azure Active Directory B2C](quickstart-web-app-dotnet.md)
+- [Solutions and Training for Azure Active Directory B2C](solution-articles.md)
+- [Technical and feature overview of Azure Active Directory B2C](technical-overview.md)
+- [Register a SAML application in Azure AD B2C](saml-service-provider.md)
+- [Configure session behavior in Azure Active Directory B2C](session-behavior.md)
+
+
+
+
 ## September 2021
 
 ### Updated articles
@@ -183,7 +216,7 @@ Welcome to what's new in Azure Active Directory B2C documentation. This article
 - [Azure AD B2C custom policy overview](custom-policy-overview.md)
 - [User flows and custom policies overview](user-flow-overview.md)
 - [Set up phone sign-up and sign-in for user flows](phone-authentication-user-flows.md)
-- [Enable multi-factor authentication in Azure Active Directory B2C](multi-factor-authentication.md)
+- [Enable multifactor authentication in Azure Active Directory B2C](multi-factor-authentication.md)
 - [User flow versions in Azure Active Directory B2C](user-flow-versions.md)
 
 
@@ -212,7 +245,7 @@ Welcome to what's new in Azure Active Directory B2C documentation. This article
 
 ### New articles
 
-- [Securing phone-based multi-factor authentication (MFA)](phone-based-mfa.md)
+- [Securing phone-based multifactor authentication (MFA)](phone-based-mfa.md)
 
 ### Updated articles
 

articles/active-directory/app-provisioning/functions-for-customizing-application-data.md

@@ -98,6 +98,9 @@ PasswordSetErrors               : 1
 
 The scope of the cmdlet's reporting may be influenced using one of the –Forest, -Domain, or –DomainController parameters. Not specifying a parameter implies –Forest.
 
+> [!NOTE]
+> If you only install the DC agent on one DC, the Get-AzureADPasswordProtectionSummaryReport will read events only from that DC. To get events from multiple DCs, you'll need the DC agent installed on each DC.
+
 The `Get-AzureADPasswordProtectionSummaryReport` cmdlet works by querying the DC agent admin event log, and then counting the total number of events that correspond to each displayed outcome category. The following table contains the mappings between each outcome and its corresponding event ID:
 
 |Get-AzureADPasswordProtectionSummaryReport property |Corresponding event ID|

articles/active-directory/authentication/howto-password-ban-bad-on-premises-monitor.md

@@ -181,7 +181,7 @@ There are two different ways to resolve a quarantine. They are:
 
 To clear the watermark and run a delta sync on the provisioning job once you have verified it, simply right-click on the status and select **clear quarantine**.
 
-You should see an notice that the quarantine is clearing.
+You should see a notice that the quarantine is clearing.
 
 ![Screenshot that shows the notice that the quarantine is clearing.](media/how-to-troubleshoot/quarantine-5.png)
 

articles/active-directory/cloud-sync/how-to-troubleshoot.md

@@ -17,7 +17,7 @@ ms.collection: M365-identity-device-management
 # Writing expressions for attribute mappings in Azure Active Directory
 When you configure cloud sync, one of the types of attribute mappings that you can specify is an expression mapping. 
 
-The expression mapping allows you to customize attributes using a script-like expression.  This allows you to transform the on-premises data into an new or different value.  For example, you may want to combine two attributes into a single attribute because this single attribute is used by one of your cloud applications.
+The expression mapping allows you to customize attributes using a script-like expression.  This allows you to transform the on-premises data into a new or different value.  For example, you may want to combine two attributes into a single attribute because this single attribute is used by one of your cloud applications.
 
 The following document will cover the script-like expressions that are used to transform the data.  This is only part of the process.  Next you will need to use this expression and place it in a web request to your tenant.  For more information on that see [Transformations](how-to-transformation.md)
 
@@ -812,4 +812,4 @@ Based on the user's first name, middle name and last name, you need to generate
 ## Next steps 
 
 - [What is provisioning?](what-is-provisioning.md)
-- [What is Azure AD Connect cloud sync?](what-is-cloud-sync.md)
+- [What is Azure AD Connect cloud sync?](what-is-cloud-sync.md)

articles/active-directory/cloud-sync/reference-expressions.md

@@ -15,7 +15,7 @@ ms.date: 11/04/2019
 ms.author: marsma
 ms.reviewer: nacanuma, twhitney
 ms.custom: aaddev, devx-track-java, has-adal-ref
-#Customer intent: As an Java application developer, I want to learn how to migrate my v1 ADAL app to v2 MSAL.
+#Customer intent: As a Java application developer, I want to learn how to migrate my v1 ADAL app to v2 MSAL.
 ---
 
 # ADAL to MSAL migration guide for Java

articles/active-directory/develop/migrate-adal-msal-java.md

@@ -14,7 +14,7 @@ ms.date: 02/15/2021
 ms.author: ryanwi
 ms.reviewer: jmprieur
 ms.custom: aaddev, identityplatformtop40, fasttrack-edit
-#Customer intent: As an application developer, I need to create an Microsoft identity environment so I can use it to register applications.
+#Customer intent: As an application developer, I need to create a Microsoft identity environment so I can use it to register applications.
 ---
 
 # Quickstart: Set up a tenant

articles/active-directory/develop/quickstart-create-new-tenant.md

@@ -11,7 +11,7 @@ ms.subservice: develop
 ms.topic: quickstart
 ms.date: 02/17/2021
 ms.author: karenhoran
-#Customer intent: As an application developer, I want to learn how my Node.js app can get an access token and call an API that is protected by an Microsoft identity platform endpoint using client credentials flow.
+#Customer intent: As an application developer, I want to learn how my Node.js app can get an access token and call an API that is protected by a Microsoft identity platform endpoint using client credentials flow.
 ---
 
 # Quickstart: Acquire a token and call Microsoft Graph API from a Node.js console app using app's identity
@@ -206,4 +206,4 @@ const tokenResponse = await cca.acquireTokenByClientCredential(tokenRequest);
 To learn more about daemon/console app development with MSAL Node, see the tutorial:
 
 > [!div class="nextstepaction"]
-> [Daemon application that calls web APIs](tutorial-v2-nodejs-console.md)
+> [Daemon application that calls web APIs](tutorial-v2-nodejs-console.md)

articles/active-directory/develop/quickstart-v2-nodejs-console.md

@@ -137,7 +137,7 @@ Applications cannot remove accounts from Windows!
 
 - WAM's interactive operations require being on the UI thread. MSAL throws a meaningful exception when not on UI thread. This does NOT apply to console apps.
 - `WithAccount` provides an accelerated authentication experience if the MSAL account was originally obtained via WAM, or, WAM can find a work and school account in Windows.
-- WAM is not able to pre-populate the username field with a login hint, unless an Work and School account with the same username is found in Windows.
+- WAM is not able to pre-populate the username field with a login hint, unless a Work and School account with the same username is found in Windows.
 - If WAM is unable to offer an accelerated authentication experience, it will show an account picker. Users can add new accounts.
 
 !["WAM account picker"](media/scenario-desktop-acquire-token-wam/wam-account-picker.png)