Syncing with main. Merge branch 'main' of https://github.com/MicrosoftDocs/azure-docs-pr into work-vhd-updates

Author: Heidilohr

.openpublishing.redirection.active-directory.json

@@ -4256,6 +4256,11 @@
       "redirect_url": "/azure/active-directory/external-identities/user-token",
       "redirect_document_id": true
     },
+    {
+      "source_path_from_root": "/articles/active-directory/fundamentals/certificate-authorities.md",
+      "redirect_url": "/azure/security/fundamentals/azure-CA-details",
+      "redirect_document_id": true
+    },
     {
       "source_path_from_root": "/articles/active-directory/b2b/what-is-b2b.md",
       "redirect_url": "/azure/active-directory/external-identities/what-is-b2b",
@@ -5818,7 +5823,12 @@
     },
     {
       "source_path_from_root": "/articles/active-directory/manage-apps/active-directory-app-proxy-protect-ndes.md",
-      "redirect_url": "/azure/active-directory/app-proxy/active-directory-app-proxy-protect-ndes",
+      "redirect_url": "/azure/active-directory/app-proxy/app-proxy-protect-ndes",
+      "redirect_document_id": false
+    },
+    {
+      "source_path_from_root": "/articles/active-directory/app-proxy/active-directory-app-proxy-protect-ndes.md",
+      "redirect_url": "/azure/active-directory/app-proxy/app-proxy-protect-ndes",
       "redirect_document_id": false
     },
     {
@@ -11210,6 +11220,11 @@
       "source_path_from_root": "/articles/active-directory-domain-services/create-resource-forest-powershell.md",
       "redirect_url": "/azure/active-directory-domain-services/create-forest-trust-powershell",
       "redirect_document_id": false
+    },
+    {
+      "source_path_from_root": "/articles/active-directory/privileged-identity-management/powershell-for-azure-ad-roles.md",
+      "redirect_url": "/powershell/microsoftgraph/tutorial-pim?view=graph-powershell-1.0",
+      "redirect_document_id": false
     }
   ]
 }

.openpublishing.redirection.azure-monitor.json

@@ -72,12 +72,12 @@
         },
         {
             "source_path_from_root": "/articles/azure-monitor/app/correlation.md",
-            "redirect_url": "/previous-versions/azure/azure-monitor/app/distributed-tracing-telemetry-correlation",
+            "redirect_url": "/azure/azure-monitor/app/distributed-tracing-telemetry-correlation",
             "redirect_document_id": false
         },
         {
             "source_path_from_root": "/articles/azure-monitor/app/distributed-tracing.md",
-            "redirect_url": "/previous-versions/azure/azure-monitor/app/distributed-tracing-telemetry-correlation",
+            "redirect_url": "/azure/azure-monitor/app/distributed-tracing-telemetry-correlation",
             "redirect_document_id": false
         },
         {

.openpublishing.redirection.json

@@ -22538,6 +22538,11 @@
             "redirect_url": "/azure/communication-services/concepts/call-automation/call-recording/bring-your-own-storage",
             "redirect_document_id": false
         },
+        {
+            "source_path_from_root": "/articles/openshift/howto-configure-ovn-kubernetes.md",
+            "redirect_url": "/azure/openshift/concepts-ovn-kubernetes",
+            "redirect_document_id": false
+        },
         {
             "source_path_from_root": "/articles/sentinel/data-connectors/microsoft-defender-threat-intelligence.md",
             "redirect_url": "/azure/sentinel/understand-threat-intelligence",
@@ -22547,6 +22552,11 @@
             "source_path_from_root": "/articles/principles-for-ai-generated-content.md",
             "redirect_url": "https://aka.ms/ai-content-principles",
             "redirect_document_id": false
-        } 
+        },
+        {
+          "source_path_from_root": "/articles/azure-monitor/app/java-standalone-arguments.md",
+          "redirect_url": "/azure/azure-monitor/app/java-get-started-supplemental",
+          "redirect_document_id": true
+        }
     ]
 }

.openpublishing.redirection.machine-configuration.json

@@ -7,63 +7,128 @@
         },
         {
           "source_path_from_root": "/articles/governance/policy/concepts/guest-configuration-policy-effects.md",
-          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-policy-effects",
+          "redirect_url": "/azure/governance/machine-configuration/remediation-options",
           "redirect_document_id": false
         },
         {
           "source_path_from_root": "/articles/governance/policy/how-to/guest-configuration-desired-state-configuration-extension-migration.md",
-          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-dsc-extension-migration",
+          "redirect_url": "/azure/governance/machine-configuration/migrate-from-dsc-extension",
           "redirect_document_id": false
         },
         {
           "source_path_from_root": "/articles/governance/policy/concepts/guest-configuration-custom.md",
-          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-custom",
+          "redirect_url": "/azure/governance/machine-configuration/dsc-in-machine-configuration",
           "redirect_document_id": false
         },
         {
           "source_path_from_root": "/articles/governance/policy/how-to/guest-configuration-create.md",
-          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-create",
+          "redirect_url": "/azure/governance/machine-configuration/how-to-create-package",
           "redirect_document_id": false
         },
         {
           "source_path_from_root": "/articles/governance/policy/how-to/guest-configuration-create-test.md",
-          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-create-test",
+          "redirect_url": "/azure/governance/machine-configuration/how-to-test-package",
           "redirect_document_id": false
         },
         {
           "source_path_from_root": "/articles/governance/policy/how-to/guest-configuration-create-signing.md",
-          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-create-signing",
+          "redirect_url": "/azure/governance/machine-configuration/how-to-sign-package",
           "redirect_document_id": false
         },
         {
           "source_path_from_root": "/articles/governance/policy/how-to/guest-configuration-create-setup.md",
-          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-create-setup",
+          "redirect_url": "/azure/governance/machine-configuration/how-to-set-up-authoring-environment",
           "redirect_document_id": false
         },
         {
           "source_path_from_root": "/articles/governance/policy/how-to/guest-configuration-create-publish.md",
-          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-create-publish",
+          "redirect_url": "/azure/governance/machine-configuration/how-to-publish-package",
           "redirect_document_id": false
         },
         {
           "source_path_from_root": "/articles/governance/policy/how-to/guest-configuration-create-definition.md",
-          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-create-definition",
+          "redirect_url": "/azure/governance/machine-configuration/how-to-create-policy-definition",
           "redirect_document_id": false
         },
         {
           "source_path_from_root": "/articles/governance/policy/how-to/guest-configuration-create-assignment.md",
-          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-create-assignment",
+          "redirect_url": "/azure/governance/machine-configuration/how-to-create-assignment",
           "redirect_document_id": false
         },
         {
           "source_path_from_root": "/articles/governance/policy/how-to/guest-configuration-azure-automation-migration.md",
-          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-azure-automation-migration",
+          "redirect_url": "/azure/governance/machine-configuration/migrate-from-azure-automation",
           "redirect_document_id": false
         },
         {
           "source_path_from_root": "/articles/governance/policy/concepts/guest-configuration-assignments.md",
-          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-assignments",
+          "redirect_url": "/azure/governance/machine-configuration/assignments",
           "redirect_document_id": false
         },
+        {
+          "source_path_from_root": "/articles/governance/machine-configuration/agent-notes.md",
+          "redirect_url": "/azure/governance/machine-configuration/agent-release-notes",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/machine-configuration/machine-configuration-assignments.md",
+          "redirect_url": "/azure/governance/machine-configuration/assignments",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/machine-configuration/machine-configuration-azure-automation-migration.md",
+          "redirect_url": "/azure/governance/machine-configuration/migrate-from-azure-automation",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/machine-configuration/machine-configuration-create-assignment.md",
+          "redirect_url": "/azure/governance/machine-configuration/how-to-create-assignment",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/machine-configuration/machine-configuration-create-definition.md",
+          "redirect_url": "/azure/governance/machine-configuration/how-to-create-policy-definition",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/machine-configuration/machine-configuration-create-publish.md",
+          "redirect_url": "/azure/governance/machine-configuration/how-to-publish-package",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/machine-configuration/machine-configuration-create-setup.md",
+          "redirect_url": "/azure/governance/machine-configuration/how-to-set-up-authoring-environment",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/machine-configuration/machine-configuration-create-signing.md",
+          "redirect_url": "/azure/governance/machine-configuration/how-to-sign-package",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/machine-configuration/machine-configuration-create-test.md",
+          "redirect_url": "/azure/governance/machine-configuration/how-to-test-package",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/machine-configuration/machine-configuration-create.md",
+          "redirect_url": "/azure/governance/machine-configuration/how-to-create-package",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/machine-configuration/machine-configuration-custom.md",
+          "redirect_url": "/azure/governance/machine-configuration/dsc-in-machine-configuration",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/machine-configuration/machine-configuration-dsc-extension-migration.md",
+          "redirect_url": "/azure/governance/machine-configuration/migrate-from-dsc-extension",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/machine-configuration/machine-configuration-policy-effects.md",
+          "redirect_url": "/azure/governance/machine-configuration/remediation-options",
+          "redirect_document_id": false
+        }
       ]
 }

articles/active-directory/app-provisioning/use-scim-to-provision-users-and-groups.md

@@ -1362,6 +1362,7 @@ Use the checklist to onboard your application quickly and customers have a smoot
 > * Establish engineering and support contacts to guide customers post gallery onboarding (Required)
 > * 3 Non-expiring test credentials for your application (Required)
 > * Support the OAuth authorization code grant or a long lived token as described in the example (Required)
+> * OIDC apps must have at least 1 role (custom or default) defined
 > * Establish an engineering and support point of contact to support customers post gallery onboarding (Required)
 > * [Support schema discovery (required)](https://tools.ietf.org/html/rfc7643#section-6)
 > * Support updating multiple group memberships with a single PATCH

articles/active-directory/app-proxy/active-directory-app-proxy-protect-ndes.md renamed to articles/active-directory/app-proxy/app-proxy-protect-ndes.md

@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.subservice: app-proxy
 ms.workload: identity
 ms.topic: how-to
-ms.date: 03/14/2023
+ms.date: 04/19/2023
 ms.author: kenwith
 ---
 
@@ -32,7 +32,7 @@ Azure AD Application Proxy is built on Azure. It gives you a massive amount of n
 1. Under **Manage**, select **Application proxy**.
 1. Select **Download connector service**.
 
-    ![Download connector service to see the Terms of Service](./media/active-directory-app-proxy-protect-ndes/application-proxy-download-connector-service.png)
+    ![Download connector service to see the Terms of Service](./media/app-proxy-protect-ndes/application-proxy-download-connector-service.png)
 
 1. Read the Terms of Service. When you're ready, select **Accept terms & Download**.
 1. Copy the Azure AD Application Proxy connector setup file to your NDES server. 
@@ -51,7 +51,7 @@ Azure AD Application Proxy is built on Azure. It gives you a massive amount of n
 1. At the end of the setup, a note is shown for environments with an outbound proxy. To configure the Azure AD Application Proxy connector to work through the outbound proxy, run the provided script, such as `C:\Program Files\Microsoft AAD App Proxy connector\ConfigureOutBoundProxy.ps1`.
 1. On the Application proxy page in the Azure portal, the new connector is listed with a status of *Active*, as shown in the following example:
 
-    ![The new Azure AD Application Proxy connector shown as active in the Azure portal](./media/active-directory-app-proxy-protect-ndes/connected-app-proxy.png)
+    ![The new Azure AD Application Proxy connector shown as active in the Azure portal](./media/app-proxy-protect-ndes/connected-app-proxy.png)
 
     > [!NOTE]
     > To provide high availability for applications authenticating through the Azure AD Application Proxy, you can install connectors on multiple VMs. Repeat the same steps listed in the previous section to install the connector on other servers joined to the Azure AD DS managed domain.
@@ -60,31 +60,26 @@ Azure AD Application Proxy is built on Azure. It gives you a massive amount of n
 
 1. Select **Enterprise applications**.
 
-   ![ensure that you're engaging the right stakeholders](./media/active-directory-app-proxy-protect-ndes/azure-active-directory-enterprise-applications.png)
+   ![ensure that you're engaging the right stakeholders](./media/app-proxy-protect-ndes/enterprise-applications.png)
 
 1. Select **+New Application**, and then select **On-premises application**. 
 
 1. On the **Add your own on-premises application**, configure the following fields:
 
    * **Name**: Enter a name for the application.
    * **Internal Url**: Enter the internal URL/FQDN of your NDES server on which you installed the connector.
-   * **Pre Authentication**: Select **Passthrough**. It’s not possible to use any form of pre-authentication. The protocol used for Certificate Requests (SCEP) doesn't provide such option.
+   * **Pre Authentication**: Select **Passthrough**. It’s not possible to use any form of pre authentication. The protocol used for Certificate Requests (SCEP) doesn't provide such option.
    * Copy the provided **External URL** to your clipboard.
 
 1. Select **+Add** to save your application.
 
 1. Test whether you can access your NDES server via the Azure AD Application proxy by pasting the link you copied in step 15 into a browser. You should see a default IIS welcome page.
-
 1. As a final test, add the *mscep.dll* path to the existing URL you pasted in the previous step:
-
-  `https://scep-test93635307549127448334.msappproxy.net/certsrv/mscep/mscep.dll`
-
+    `https://scep-test93635307549127448334.msappproxy.net/certsrv/mscep/mscep.dll`
 1. You should see an **HTTP Error 403 – Forbidden** response.
-
 1. Change the NDES URL provided (via Microsoft Intune) to devices. This change could either be in Microsoft Configuration Manager or the Microsoft Intune admin center.
-
-   * For Configuration Manager, go to the certificate registration point and adjust the URL. This URL is what devices call out to and present their challenge.
-   * For Intune standalone, either edit or create a new SCEP policy and add the new URL.
+    - For Configuration Manager, go to the certificate registration point and adjust the URL. This URL is what devices call out to and present their challenge.
+    - For Intune standalone, either edit or create a new SCEP policy and add the new URL.
 
 ## Next steps