Merge branch 'TSItoFabric' of github.com:cosh/azure-docs-pr-new; branch 'main' of github.com:MicrosoftDocs/azure-docs-pr into TSItoFabric

Author: cosh

articles/active-directory-b2c/oauth2-error-technical-profile.md

@@ -9,7 +9,7 @@ manager: CelesteDG
 ms.service: active-directory
 
 ms.topic: reference
-ms.date: 01/11/2024
+ms.date: 05/07/2024
 ms.author: kengaderdus
 ms.subservice: B2C
 
@@ -73,6 +73,43 @@ The following example shows a technical profile for `ReturnOAuth2Error`:
 </ClaimsProviders> -->
 ```
 
+## Define claims transformation to generate custom values of error code and error message
+
+Use these steps to generate custom values of error code and error message:
+
+1. Locate the `ClaimsTransformations` element, then add the following code inside it
+
+    ```xml
+    <!--
+     <ClaimsTransformations> -->
+    <ClaimsTransformation Id="GenerateErrorCode" TransformationMethod="CreateStringClaim">
+            <InputParameters>
+              <InputParameter Id="value" DataType="string" Value="Error_001" />
+            </InputParameters>
+            <OutputClaims>
+              <OutputClaim ClaimTypeReferenceId="errorCode" TransformationClaimType="createdClaim" />
+            </OutputClaims>
+          </ClaimsTransformation>
+          <ClaimsTransformation Id="GenerateErrorMessage" TransformationMethod="CreateStringClaim">
+            <InputParameters>
+              <InputParameter Id="value" DataType="string" Value="Insert error description." />
+            </InputParameters>
+            <OutputClaims>
+              <OutputClaim ClaimTypeReferenceId="errorMessage" TransformationClaimType="createdClaim" />
+            </OutputClaims>
+          </ClaimsTransformation>
+    <!--
+    </ClaimsTransformations> -->
+    ```
+
+1. Add the two claims transformations in the `OutputClaimsTransformations` element of any technical profile before Oauth2 technical that you define:
+
+    ```xml
+        <OutputClaimsTransformations>
+          <OutputClaimsTransformation ReferenceId="generateErrorCode" />
+          <OutputClaimsTransformation ReferenceId="generateErrorMessage" />
+        </OutputClaimsTransformations>
+    ```
 ## Input claims
 
 The **InputClaims** element contains a list of claims required to return OAuth2 error. 
@@ -123,6 +160,20 @@ In the following example:
 </UserJourney>
 ```
 
+Optionally, you can use preconditions to manipulate the Oauth2 error technical profile. For example, if there is no email claim, you can set to call Oauth2 error technical profile:
+
+```xml
+<OrchestrationStep Order="3" Type="SendClaims" CpimIssuerTechnicalProfileReferenceId="ReturnOAuth2Error">
+      <Preconditions>
+        <Precondition Type="ClaimsExist" ExecuteActionsIf="false">
+          <Value>email</Value>
+          <Action>SkipThisOrchestrationStep</Action>
+        </Precondition>
+      </Preconditions>
+    </OrchestrationStep>
+```
+
+
 ## Next steps
 
 Learn about [UserJourneys](userjourneys.md)

articles/ai-services/computer-vision/Tutorials/liveness.md

@@ -46,17 +46,6 @@ The following code uses the above method to get face data from a series of image
 [!code-csharp[](~/cognitive-services-quickstart-code/dotnet/Face/FaceQuickstart.cs?name=snippet_loadfaces)]
 
 
-#### [JavaScript](#tab/javascript)
-
-The following face detection method is optimized for comparison operations. It doesn't extract detailed face attributes, and it uses an optimized recognition model.
-
-:::code language="js" source="~/cognitive-services-quickstart-code/javascript/Face/sdk_quickstart.js" id="recognize":::
-
-The following code uses the above method to get face data from a series of images.
-
-:::code language="js" source="~/cognitive-services-quickstart-code/javascript/Face/sdk_quickstart.js" id="snippet_loadfaces":::
-
-
 #### [REST API](#tab/rest)
 
 Copy the following cURL command and insert your key and endpoint where appropriate. Then run the command to detect one of the target faces.
@@ -89,12 +78,6 @@ The following code prints the match details to the console:
 
 [!code-csharp[](~/cognitive-services-quickstart-code/dotnet/Face/FaceQuickstart.cs?name=snippet_find_similar_print)]
 
-#### [JavaScript](#tab/javascript)
-
-The following method takes a set of target faces and a single source face. Then, it compares them and finds all the target faces that are similar to the source face. Finally, it prints the match details to the console.
-
-:::code language="js" source="~/cognitive-services-quickstart-code/javascript/Face/sdk_quickstart.js" id="find_similar":::
-
 
 #### [REST API](#tab/rest)
 

articles/ai-services/computer-vision/how-to/find-similar-faces.md

@@ -0,0 +1,45 @@
+---
+author: PatrickFarley
+ms.service: azure-ai-vision
+ms.topic: include
+ms.date: 08/07/2023
+ms.author: pafarley
+---
+
+In this example, write your credentials to environment variables on the local machine that runs the application.
+
+[!INCLUDE [find key and endpoint](./find-key.md)]
+
+> [!TIP]
+> Don't include the key directly in your code, and never post it publicly. See the Azure AI services [security](../../security-features.md) article for more authentication options like [Azure Key Vault](../../use-key-vault.md).
+
+To set the environment variable for your key and endpoint, open a console window and follow the instructions for your operating system and development environment.
+
+1. To set the `VISION_KEY` environment variable, replace `your-key` with one of the keys for your resource.
+2. To set the `VISION_ENDPOINT` environment variable, replace `your-endpoint` with the endpoint for your resource.
+
+#### [Windows](#tab/windows)
+
+```console
+setx VISION_KEY your-key
+```
+
+```console
+setx VISION_ENDPOINT your-endpoint
+```
+
+After you add the environment variables, you may need to restart any running programs that will read the environment variables, including the console window.
+
+#### [Linux](#tab/linux)
+
+```bash
+export VISION_KEY=your-key
+```
+
+```bash
+export VISION_ENDPOINT=your-endpoint
+```
+
+After you add the environment variables, run `source ~/.bashrc` from your console window to make the changes effective.
+
+---

articles/ai-services/computer-vision/includes/face-environment-variables.md

@@ -27,8 +27,9 @@ Get started with facial recognition using the Face client library for .NET. The
     * You can use the free pricing tier (`F0`) to try the service, and upgrade later to a paid tier for production.
 
 
+## Create environment variables
 
-[!INCLUDE [create environment variables](../environment-variables.md)]
+[!INCLUDE [create environment variables](../face-environment-variables.md)]
 
 ## Identify and verify faces
 

articles/ai-services/computer-vision/includes/quickstarts-sdk/identity-csharp-sdk.md

@@ -15,7 +15,7 @@ ms.author: pafarley
 
 Get started with facial recognition using the Face client library for JavaScript. Follow these steps to install the package and try out the example code for basic tasks. The Face service provides you with access to advanced algorithms for detecting and recognizing human faces in images. Follow these steps to install the package and try out the example code for basic face identification using remote images.
 
-[Reference documentation](/javascript/api/overview/azure/cognitiveservices-face-readme) | [Package (npm)](https://www.npmjs.com/package/@azure/cognitiveservices-face) | [Samples](/samples/browse/?products=azure&term=face&languages=javascript)
+[Reference documentation](https://aka.ms/azsdk-javascript-face-ref) | [Library source code](https://github.com/Azure/azure-sdk-for-js/tree/main/sdk/face/ai-vision-face-rest) | [Package (npm)](https://www.npmjs.com/package/@azure-rest/ai-vision-face) | [Samples](https://github.com/Azure/azure-sdk-for-js/tree/main/sdk/face/ai-vision-face-rest/samples)
 
 ## Prerequisites
 
@@ -27,8 +27,9 @@ Get started with facial recognition using the Face client library for JavaScript
     * You can use the free pricing tier (`F0`) to try the service, and upgrade later to a paid tier for production.
 
 
+## Create environment variables
 
-[!INCLUDE [create environment variables](../environment-variables.md)]
+[!INCLUDE [create environment variables](../face-environment-variables.md)]
 
 
 ## Identify and verify faces
@@ -47,10 +48,10 @@ Get started with facial recognition using the Face client library for JavaScript
     npm init
     ```
 
-1. Install the `ms-rest-azure` and `azure-cognitiveservices-face` npm packages:
+1. Install the `@azure-rest/ai-vision-face` npm packages:
 
     ```console
-    npm install @azure/cognitiveservices-face @azure/ms-rest-js uuid
+    npm install @azure-rest/ai-vision-face
     ```
 
     Your app's `package.json` file is updated with the dependencies.
@@ -96,12 +97,18 @@ Add face to the person group person: (Family2-Lady) from image: Family2-Lady1.jp
 Done adding faces to person group.
 
 Training person group: c08484e0-044b-4610-8b7e-c957584e5d2d.
-Waiting 10 seconds...
 Training status: succeeded.
-
+No persons identified for face with ID 259dd648-be70-499c-9942-3512594e21eb
 Person: Family1-Mom is identified for face in: identification1.jpg with ID: b7f7f542-c338-4a40-ad52-e61772bc6e14. Confidence: 0.96921.
 Person: Family1-Son is identified for face in: identification1.jpg with ID: 600dc1b4-b2c4-4516-87de-edbbdd8d7632. Confidence: 0.92886.
 Person: Family1-Dad is identified for face in: identification1.jpg with ID: e83b494f-9ad2-473f-9d86-3de79c01e345. Confidence: 0.96725.
+Verification result between face bb7f7f542-c338-4a40-ad52-e61772bc6e14 and person de1d7dea-a393-4f69-9062-10cb66d4cf17: true with confidence: 0.96921
+Verification result between face 600dc1b4-b2c4-4516-87de-edbbdd8d7632 and person 05fd84e4-41b0-4716-b767-4376e33fa207: true with confidence: 0.92886
+Verification result between face e83b494f-9ad2-473f-9d86-3de79c01e345 and person c5124fe2-39dd-47ba-9163-1ed2998fdeb2: true with confidence: 0.96725
+
+Deleting person group: c08484e0-044b-4610-8b7e-c957584e5d2d
+
+Done.
 ```
 
 
@@ -120,4 +127,4 @@ In this quickstart, you learned how to use the Face client library for JavaScrip
 > [Specify a face detection model version](../../how-to/specify-detection-model.md)
 
 * [What is the Face service?](../../overview-identity.md)
-* More extensive sample code can be found on [GitHub](https://github.com/Azure-Samples/cognitive-services-quickstart-code/blob/master/javascript/Face/sdk_quickstart.js).
+* More extensive sample code can be found on [GitHub](https://github.com/Azure/azure-sdk-for-js/tree/main/sdk/face/ai-vision-face-rest/samples).

articles/ai-services/computer-vision/includes/quickstarts-sdk/identity-javascript-sdk.md

@@ -28,8 +28,9 @@ Get started with facial recognition using the Face client library for Python. Fo
     * You can use the free pricing tier (`F0`) to try the service, and upgrade later to a paid tier for production.
 
 
+## Create environment variables
 
-[!INCLUDE [create environment variables](../environment-variables.md)]
+[!INCLUDE [create environment variables](../face-environment-variables.md)]
 
 ## Identify and verify faces
 

articles/ai-services/computer-vision/includes/quickstarts-sdk/identity-python-sdk.md

@@ -207,9 +207,7 @@ sections:
 
             - **Storage Account Contributor**: You need this role for the storage account to set up cross-origin resource sharing (CORS) settings. It's a one-time effort if you reuse the same storage account.
 
-            - **Contributor**: You need this role to create a resource group and resources.
-
-          Having Contributor or Storage Account Contributor role doesn't give you access to use your Document Intelligence resource or storage account if local (key-based) authentication is disabled. You still need the basic roles (Cognitive Services User and Storage Data Blob Contributor) to use the functions on Document Intelligence Studio.
+            - **Contributor**: You need this role to create a resource group and resources. **Contributor** or **Storage Account Contributor** role doesn't give you access to use your Document Intelligence resource or storage account if local (key-based) authentication is disabled. You still need the basic roles (**Cognitive Services User** and **Storage Data Blob Contributor**) to use the functions on Document Intelligence Studio.
 
           For more information, see [Microsoft Entra built-in roles](../../role-based-access-control/built-in-roles.md) and the sections about Azure role assignments in the [Document Intelligence Studio quickstart](quickstarts/try-document-intelligence-studio.md).
 
@@ -256,6 +254,44 @@ sections:
 
           - Re-create a custom project with the migrated Document Intelligence resource and specify the same storage account.
 
+      - question: |
+          Why an I receiving the error "PermissionDenied" when using prebuilt apps or opening my custom project?
+        answer: |
+          If you received error "PermissionDenied: Principal does not have access to API/Operation" when analyzing against prebuilt models or opening a custom project, it is likely the local (key-based) authentication is disabled for your Document Intelligence resource and your do not have enough permission to access the resource.  Please reference [Azure role assignments](quickstarts/try-document-intelligence-studio.md#azure-role-assignments) to configure your access roles.
+
+      - question: |
+          Why an I receiving the error "AuthorizationPermissionMismatch" when opening my custom project?
+        answer: |
+          If you received error "AuthorizationPermissionMismatch: This request is not authorized to perform this operation using this permission" when opening a custom project, it is likely the local (key-based) authentication is disabled for your storage account and your do not have enough permission to access the blob data.  Please reference [Azure role assignments](quickstarts/try-document-intelligence-studio.md#azure-role-assignments-1) to configure your access roles.
+
+      - question: |
+          Why am I not able to sign in to Document Intelligence Studio and keeps seeing InteractionRequiredAuthError error (AADSTS50058)?
+        answer: |
+          If you received error "InteractionRequiredAuthError: login_required: AADSTS50058: A silent sign-request was sent but no user is signed in.", this is due to 3rd-party cookies are blocked by your browser so we cannot successfully sign in your account.
+        
+          For **Edge** users, please:
+          - Go to **Settings** for Edge
+          - Search for "**third-party**"
+          - Go to **Manage and delete cookies and site data**
+          - Turn off the setting of **Block third-party cookies**
+
+          For **Chrome** users, please:
+          - Go to **Settings** for Chrome
+          - Search for "**Third-party**"
+          - Under **Default behavior**, select **Allow third-party cookies**
+
+          For **Firefox** users, please:
+          - Go to **Settings** for Firefox
+          - Search for "**cookies**"
+          - Under **Enhanced Tracking Protection**, select **Manage Exceptions**
+          - Add exception for **https://documentintelligence.ai.azure.com** or the Document Intelligence Studio URL of your environment
+
+          For **Safari** users, please:
+          - Choose **Safari** > **Preferences**
+          - Click **Privacy**
+          - Deselect **Block all cookies**
+
+
       - question: |
          Are there separate URL endpoints for Document Intelligence sovereign cloud regions?
         answer: |