update links and add a warning panel

terencefan · terencefan · commit 5979c7cfb79e · 2023-04-11T14:42:23.000+08:00
diff --git a/articles/azure-signalr/howto-disable-local-auth.md b/articles/azure-signalr/howto-disable-local-auth.md
@@ -13,6 +13,11 @@ ms.topic: conceptual
 
 There are two ways to authenticate to Azure SignalR Service resources: Azure Active Directory (Azure AD) and Access Key. Azure AD provides superior security and ease of use over access key. With Azure AD, there’s no need to store the tokens in your code and risk potential security vulnerabilities. We recommend that you use Azure AD with your Azure SignalR Service resources when possible.
 
+> [!IMPORTANT]
+> Disabling local authentication can have following influences.
+> - The current set of access keys will be permanently deleted. 
+> - Tokens signed with current set of access keys will become unavailable. 
+
 ## Use Azure portal
 
 In this section, you will learn how to use the Azure portal to disable local authentication.
@@ -111,5 +116,6 @@ You can assign the [Azure SignalR Service should have local authentication metho
 
 See the following docs to learn about authentication methods.
 
+- [Overview of Azure AD for SignalR](signalr-concept-authorize-azure-active-directory.md)
 - [Authenticate with Azure applications](./signalr-howto-authorize-application.md)
 - [Authenticate with managed identities](./signalr-howto-authorize-managed-identity.md)
diff --git a/articles/azure-signalr/signalr-concept-authorize-azure-active-directory.md b/articles/azure-signalr/signalr-concept-authorize-azure-active-directory.md
@@ -17,6 +17,11 @@ Authorizing requests against SignalR with Azure AD provides superior security an
 <a id="security-principal"></a>
 *[1] security principal: a user/resource group, an application, or a service principal such as system-assigned identities and user-assigned identities.*
 
+> [!IMPORTANT]
+> Disabling local authentication can have following influences.
+> - The current set of access keys will be permanently deleted. 
+> - Tokens signed with access keys will no longer be available. 
+
 ## Overview of Azure AD for SignalR
 
 When a security principal attempts to access a SignalR resource, the request must be authorized. With Azure AD, access to a resource requires 2 steps. 
@@ -82,4 +87,7 @@ To learn more about roles and role assignments, see:
 
 To learn how to create custom roles, see:
 
-- [Steps to create a custom role](../role-based-access-control/custom-roles.md#steps-to-create-a-custom-role)
+- [Steps to create a custom role](../role-based-access-control/custom-roles.md#steps-to-create-a-custom-role)
+
+To learn how to use only Azure AD authentication, see
+- [Disable local authentication](./howto-disable-local-auth.md)
diff --git a/articles/azure-signalr/signalr-howto-authorize-application.md b/articles/azure-signalr/signalr-howto-authorize-application.md
@@ -221,3 +221,4 @@ On Azure portal, add settings as follows:
 See the following related articles:
 - [Overview of Azure AD for SignalR](signalr-concept-authorize-azure-active-directory.md)
 - [Authorize request to SignalR resources with Azure AD from managed identities](signalr-howto-authorize-managed-identity.md)
+- [Disable local authentication](./howto-disable-local-auth.md)
diff --git a/articles/azure-signalr/signalr-howto-authorize-managed-identity.md b/articles/azure-signalr/signalr-howto-authorize-managed-identity.md
@@ -162,3 +162,4 @@ If you want to use user-assigned identity, you need to assign `clientId`in addit
 See the following related articles:
 - [Overview of Azure AD for SignalR](signalr-concept-authorize-azure-active-directory.md)
 - [Authorize request to SignalR resources with Azure AD from Azure applications](signalr-howto-authorize-application.md)
+- [Disable local authentication](./howto-disable-local-auth.md)
diff --git a/articles/azure-web-pubsub/concept-azure-ad-authorization.md b/articles/azure-web-pubsub/concept-azure-ad-authorization.md
@@ -78,14 +78,17 @@ You can scope access to Azure SignalR resources at the following levels, beginni
 
 ## Next steps
 
-To learn how to create an Azure application and use AAD Auth, see
+To learn how to create an Azure application and use Azure AD auth, see
 - [Authorize request to Web PubSub resources with Azure AD from Azure applications](howto-authorize-from-application.md)
 
-To learn how to configure a managed identity and use AAD Auth, see
+To learn how to configure a managed identity and use Azure AD auth, see
 - [Authorize request to Web PubSub resources with Azure AD from managed identities](howto-authorize-from-managed-identity.md)
 
 To learn more about roles and role assignments, see 
 - [What is Azure role-based access control](../role-based-access-control/overview.md).
 
 To learn how to create custom roles, see 
-- [Steps to create a custom role](../role-based-access-control/custom-roles.md#steps-to-create-a-custom-role)
+- [Steps to create a custom role](../role-based-access-control/custom-roles.md#steps-to-create-a-custom-role)
+
+To learn how to use only Azure AD authentication, see
+- [Disable local authentication](./howto-disable-local-auth.md)
diff --git a/articles/azure-web-pubsub/howto-authorize-from-application.md b/articles/azure-web-pubsub/howto-authorize-from-application.md
@@ -143,5 +143,7 @@ We officially support 4 programming languages:
 ## Next steps
 
 See the following related articles:
+
 - [Overview of Azure AD for Web PubSub](concept-azure-ad-authorization.md)
 - [Authorize request to Web PubSub resources with Azure AD from managed identities](howto-authorize-from-managed-identity.md)
+- [Disable local authentication](./howto-disable-local-auth.md)
diff --git a/articles/azure-web-pubsub/howto-authorize-from-managed-identity.md b/articles/azure-web-pubsub/howto-authorize-from-managed-identity.md
@@ -104,5 +104,7 @@ We officially support 4 programming languages:
 ## Next steps
 
 See the following related articles:
+
 - [Overview of Azure AD for Web PubSub](concept-azure-ad-authorization.md)
-- [Authorize request to Web PubSub resources with Azure AD from Azure applications](howto-authorize-from-application.md)
+- [Authorize request to Web PubSub resources with Azure AD from Azure applications](howto-authorize-from-application.md)
+- [Disable local authentication](./howto-disable-local-auth.md)
diff --git a/articles/azure-web-pubsub/howto-disable-local-auth.md b/articles/azure-web-pubsub/howto-disable-local-auth.md
@@ -13,6 +13,12 @@ ms.topic: conceptual
 
 There are two ways to authenticate to Azure Web PubSub Service resources: Azure Active Directory (Azure AD) and Access Key. Azure AD provides superior security and ease of use over access key. With Azure AD, there’s no need to store the tokens in your code and risk potential security vulnerabilities. We recommend that you use Azure AD with your Azure Web PubSub Service resources when possible.
 
+> [!IMPORTANT]
+> Disabling local authentication can have following influences.
+> - The current set of access keys will be permanently deleted. 
+> - Tokens signed with current set of access keys will become unavailable. 
+> - Signature will **NOT** be attached in the upstream request header. Please visit *[how to validate access token](./howto-use-managed-identity.md#validate-access-tokens)* to learn how to validate requests via Azure AD token.
+
 ## Use Azure portal
 
 In this section, you will learn how to use the Azure portal to disable local authentication.
@@ -89,5 +95,6 @@ You can assign the [Azure Web PubSub Service should have local authentication me
 
 See the following docs to learn about authentication methods.
 
+- [Overview of Azure AD for Web PubSub](concept-azure-ad-authorization.md)
 - [Authenticate with Azure applications](./howto-authorize-from-application.md)
 - [Authenticate with managed identities](./howto-authorize-from-managed-identity.md)
