add more articles

Author: EdB-MSFT

articles/azure-monitor/app/azure-ad-authentication.md

@@ -294,31 +294,9 @@ The Application Insights API supports Microsoft Entra authentication with three
 
 In the client credentials flow, the token is used with the Application Insights endpoint. A single request is made to receive a token by using the credentials provided for your app in the previous step when you [register an app in Microsoft Entra ID](../logs/api/register-app-for-token.md).
 
-Use the `https://api.applicationinsights.io` endpoint.
+Use  `resource=https://api.applicationinsights.io`.
 
-##### Client credentials token URL (POST request)
-
-```http
-    POST /<your-tenant-id>/oauth2/token
-    Host: https://login.microsoftonline.com
-    Content-Type: application/x-www-form-urlencoded
-    
-    grant_type=client_credentials
-    &client_id=<app-client-id>
-    &resource=https://api.applicationinsights.io
-    &client_secret=<app-client-secret>
-```
-
-A successful request receives an access token in the response:
-
-```http
-    {
-        token_type": "Bearer",
-        "expires_in": "86399",
-        "ext_expires_in": "86399",
-        "access_token": ""eyJ0eXAiOiJKV1QiLCJ.....Ax"
-    }
-```
+[!INCLUDE [Get a token](../../includes/get-a-token.md)]
 
 Use the token in requests to the Application Insights endpoint:
 

articles/azure-monitor/essentials/metrics-store-custom-rest-api.md

@@ -44,7 +44,7 @@ To submit custom metrics to Azure Monitor, the entity that submits the metric ne
 
 ### Get an authorization token
 
-Once you have created your managed identity or service principal and assigned **Monitoring Metrics Publisher** permissions, you can get an authorization token by using the following methods:
+Once you have created your managed identity or service principal and assigned **Monitoring Metrics Publisher** permissions, you can get an authorization token by using the following methods.
 When requesting a token specify `resource: https://monitoring.azure.com`.
 
 [!INCLUDE [Get a token](../includes/get-a-token.md)]

articles/azure-monitor/essentials/rest-api-walkthrough.md

@@ -20,12 +20,11 @@ Retrieve metric definitions, dimension values, and metric values using the Azure
 Request submitted using the Azure Monitor API use the Azure Resource Manager authentication model. All requests are authenticated with Microsoft Entra ID. One approach to authenticating the client application is to create a Microsoft Entra service principal and retrieve an authentication token. You can create a Microsoft Entra service principal using the Azure portal, CLI, or PowerShell. For more information, see [Register an App to request authorization tokens and work with APIs](../logs/api/register-app-for-token.md).
 
 ### Retrieve a token
-Once you've created a service principal, retrieve an access token. specify resource=https://management.azure.com in the request to get a token.
+Once you've created a service principal, retrieve an access token. Specify `resource=https://management.azure.com` in the token request.
 
 [!INCLUDE [Get a token](../includes/get-a-token.md)]
 
 
-
 After authenticating and retrieving a token, use the access token in your Azure Monitor API requests by including the header  `'Authorization: Bearer <access token>'`
 
 > [!NOTE]

articles/azure-monitor/includes/get-a-token.md

@@ -62,9 +62,9 @@ For more information, see [az account get-access-token](/cli/azure/account?view=
 
 ## [SDK](#tab/SDK)
 
-You can use the SDK to get a token. The following code is an example of how to get a token using the SDK.
+Use the SDK to get a token. The following code samples show how to get a token using C#, NodeJS, and Python.
 
-### .NET
+#### .NET
 
 The following code shows how to get a token using the Azure. Identity library It requires a client ID and client secret to authenticate the request. 
 ```csharp
@@ -73,7 +73,7 @@ var clientCredential = new ClientCredential("<your apps client ID>", "<your apps
 var result = context.AcquireTokenAsync("https://monitoring.azure.com", clientCredential).Result;
 ```    
 
-Alternatively you can use the DefaultAzureCredential class to get a token. This uses the default Azure credentials to authenticate the request and doesn't require a client ID or client secret.
+Alternatively, you can use the DefaultAzureCredential class to get a token. This uses the default Azure credentials to authenticate the request and doesn't require a client ID or client secret.
 
 ```csharp
 var credential = new DefaultAzureCredential();
@@ -97,7 +97,7 @@ var token = credential.GetToken(new TokenRequestContext(new[] { "https://managem
 For more information, see [DefaultAzureCredential Class](/dotnet/api/azure.identity.defaultazurecredential?view=azure-dotnet)
 
 
-### Node.js
+#### Node.js
 
 For information on authentication use JavaScript and NodeJS,  see [How to authenticate JavaScript apps to Azure services using the Azure SDK for JavaScript](/azure/developer/javascript/sdk/authentication/overview)
 
@@ -125,7 +125,7 @@ const accessToken = await credential.getToken("https://management.azure.com/.def
 ```
 For more information, see [ClientSecretCredential Class](/javascript/api/@azure/identity/clientsecretcredential?view=azure-node-latest)
 
-### Python
+#### Python
 
 The following code shows how to get a token using the DefaultAzureCredential class. This uses the default Azure credentials to authenticate the request and doesn't require a client ID or client secret.
 
@@ -152,6 +152,6 @@ token =  credential2.get_token("https://management.azure.com/.default")
 print(token.token)
 ```
 
- For more information see [ClientSecretCredential Class](/python/api/azure-identity/azure.identity.clientsecretcredential?view=azure-python)
+ For more information, see [ClientSecretCredential Class](/python/api/azure-identity/azure.identity.clientsecretcredential?view=azure-python)
 
 ---

articles/azure-monitor/logs/api/access-api.md

@@ -120,31 +120,10 @@ The Log Analytics API supports Microsoft Entra authentication with three differe
 
 In the client credentials flow, the token is used with the Log Analytics endpoint. A single request is made to receive a token by using the credentials provided for your app in the previous step when you [register an app in Microsoft Entra ID](./register-app-for-token.md).
 
-Use the `https://api.loganalytics.azure.com` endpoint.
+Use `resource=https://api.loganalytics.azure.com`.
 
-#### Client credentials token URL (POST request)
+[!INCLUDE [Get a token](./includes/get-a-token.md)]
 
-```http
-    POST /<your-tenant-id>/oauth2/token
-    Host: https://login.microsoftonline.com
-    Content-Type: application/x-www-form-urlencoded
-    
-    grant_type=client_credentials
-    &client_id=<app-client-id>
-    &resource=https://api.loganalytics.io
-    &client_secret=<app-client-secret>
-```
-
-A successful request receives an access token in the response:
-
-```http
-    {
-        token_type": "Bearer",
-        "expires_in": "86399",
-        "ext_expires_in": "86399",
-        "access_token": ""eyJ0eXAiOiJKV1QiLCJ.....Ax"
-    }
-```
 
 Use the token in requests to the Log Analytics endpoint: