Merge pull request #127714 from MicrosoftDocs/master

8/28 PM Publish

Author: huypub

.openpublishing.redirection.json

@@ -37349,8 +37349,13 @@
     },
     {
       "source_path": "articles/active-directory/application-access-panel-web-sign-in-problem.md",
-      "redirect_url": "/azure/active-directory/manage-apps/access-panel-troubleshoot-web-sign-in-problem",
-      "redirect_document_id": true
+      "redirect_url": "/azure/active-directory/manage-apps/application-sign-in-other-problem-access-panel",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/active-directory/manage-apps/access-panel-troubleshoot-web-sign-in-problem.md",
+      "redirect_url": "/azure/active-directory/manage-apps/application-sign-in-other-problem-access-panel",
+      "redirect_document_id": false
     },
     {
       "source_path": "articles/active-directory/manage-apps/access-panel-workspaces.md",
@@ -37574,8 +37579,13 @@
     },
     {
       "source_path": "articles/active-directory/application-sign-in-other-problem-deeplink.md",
-      "redirect_url": "/azure/active-directory/manage-apps/application-sign-in-other-problem-deeplink",
-      "redirect_document_id": true
+      "redirect_url": "/azure/active-directory/manage-apps/application-sign-in-other-problem-access-panel",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/active-directory/manage-apps/application-sign-in-other-problem-deeplink.md",
+      "redirect_url": "/azure/active-directory/manage-apps/application-sign-in-other-problem-access-panel",
+      "redirect_document_id": false
     },
     {
       "source_path": "articles/active-directory/application-sign-in-problem-application-error.md",

articles/active-directory-domain-services/powershell-create-instance.md

@@ -11,7 +11,8 @@ ms.subservice: domain-services
 ms.workload: identity
 ms.topic: sample
 ms.date: 07/09/2020
-ms.author: iainfou
+ms.author: iainfou 
+ms.custom: devx-track-azurepowershell
 
 ---
 # Enable Azure Active Directory Domain Services using PowerShell
@@ -264,4 +265,4 @@ To see the managed domain in action, you can [domain-join a Windows VM][windows-
 [New-AzVirtualNetwork]: /powershell/module/Az.Network/New-AzVirtualNetwork
 [Get-AzSubscription]: /powershell/module/Az.Accounts/Get-AzSubscription
 [cloud-shell]: ../cloud-shell/cloud-shell-windows-users.md
-[availability-zones]: ../availability-zones/az-overview.md
+[availability-zones]: ../availability-zones/az-overview.md

articles/active-directory-domain-services/scoped-synchronization.md

@@ -11,7 +11,8 @@ ms.subservice: domain-services
 ms.workload: identity
 ms.topic: how-to
 ms.date: 07/24/2020
-ms.author: iainfou
+ms.author: iainfou 
+ms.custom: devx-track-azurepowershell
 
 ---
 # Configure scoped synchronization from Azure AD to Azure Active Directory Domain Services using the Azure portal
@@ -91,4 +92,4 @@ To learn more about the synchronization process, see [Understand synchronization
 [concepts-sync]: synchronization.md
 [tutorial-create-instance]: tutorial-create-instance.md
 [create-azure-ad-tenant]: ../active-directory/fundamentals/sign-up-organization.md
-[associate-azure-ad-tenant]: ../active-directory/fundamentals/active-directory-how-subscriptions-associated-directory.md
+[associate-azure-ad-tenant]: ../active-directory/fundamentals/active-directory-how-subscriptions-associated-directory.md

articles/active-directory/authentication/howto-mfa-reporting.md

@@ -13,7 +13,8 @@ author: iainfoulds
 manager: daveba
 ms.reviewer: michmcla
 
-ms.collection: M365-identity-device-management
+ms.collection: M365-identity-device-management 
+ms.custom: devx-track-azurepowershell
 ---
 # Use the sign-ins report to review Azure Multi-Factor Authentication events
 
@@ -176,4 +177,4 @@ The following additional information and reports are available for MFA events, i
 
 ## Next steps
 
-This article provided an overview of the sign-ins activity report. For more detailed information on what this report contains and understand the data, see [sign-in activity reports in Azure AD](../reports-monitoring/concept-sign-ins.md).
+This article provided an overview of the sign-ins activity report. For more detailed information on what this report contains and understand the data, see [sign-in activity reports in Azure AD](../reports-monitoring/concept-sign-ins.md).

articles/active-directory/authentication/howto-mfa-userstates.md

@@ -13,7 +13,8 @@ author: iainfoulds
 manager: daveba
 ms.reviewer: michmcla
 
-ms.collection: M365-identity-device-management
+ms.collection: M365-identity-device-management 
+ms.custom: devx-track-azurepowershell
 ---
 # Enable per-user Azure Multi-Factor Authentication to secure sign-in events
 
@@ -186,4 +187,4 @@ To configure Azure Multi-Factor Authentication settings, see  [Configure Azure M
 
 To manage user settings for Azure Multi-Factor Authentication, see [Manage user settings with Azure Multi-Factor Authentication](howto-mfa-userdevicesettings.md).
 
-To understand why a user was prompted or not prompted to perform MFA, see [Azure Multi-Factor Authentication reports](howto-mfa-reporting.md).
+To understand why a user was prompted or not prompted to perform MFA, see [Azure Multi-Factor Authentication reports](howto-mfa-reporting.md).

articles/active-directory/authentication/howto-password-ban-bad-on-premises-monitor.md

@@ -13,7 +13,8 @@ author: iainfoulds
 manager: daveba
 ms.reviewer: jsimmons
 
-ms.collection: M365-identity-device-management
+ms.collection: M365-identity-device-management 
+ms.custom: devx-track-azurepowershell
 ---
 # Monitor and review logs for on-premises Azure AD Password Protection environments
 

articles/active-directory/authentication/howto-sspr-authenticationdata.md

@@ -13,7 +13,8 @@ author: iainfoulds
 manager: daveba
 ms.reviewer: rhicock
 
-ms.collection: M365-identity-device-management
+ms.collection: M365-identity-device-management 
+ms.custom: devx-track-azurepowershell
 ---
 # Pre-populate user authentication contact information for Azure Active Directory self-service password reset (SSPR)
 
@@ -166,4 +167,4 @@ Once authentication contact information is pre-populated for users, complete the
 > [!div class="nextstepaction"]
 > [Enable Azure AD self-service password reset](tutorial-enable-sspr.md)
 
-[Contact]: ./media/howto-sspr-authenticationdata/user-authentication-contact-info.png "Global administrators can modify a user's authentication contact info"
+[Contact]: ./media/howto-sspr-authenticationdata/user-authentication-contact-info.png "Global administrators can modify a user's authentication contact info"

articles/active-directory/conditional-access/howto-conditional-access-policy-block-legacy.md

@@ -34,7 +34,7 @@ The following steps will help create a Conditional Access policy to block legacy
 1. Under **Cloud apps or actions**, select **All cloud apps**.
    1. Select **Done**.
 1. Under **Conditions** > **Client apps**, set **Configure** to **Yes**.
-   1. Check only the boxes **Exchange ActiveSync clients** and **Other clients**.
+   1. Check only the boxes **Exchange ActiveSync clients** and **Other clients**. To deploy Exchange ActiveSync Conditional Access policy in Azure, the user must also be a Global Administrator.
    1. Select **Done**.
 1. Under **Access controls** > **Grant**, select **Block access**.
    1. Select **Select**.

articles/active-directory/develop/active-directory-claims-mapping.md

@@ -297,7 +297,7 @@ The ID element identifies which property on the source provides the value for th
 | User | streetaddress | Street Address |
 | User | postalcode | Postal Code |
 | User | preferredlanguange | Preferred Language |
-| User | onpremisesuserprincipalname | On-premises UPN |
+| User | onpremisesuserprincipalname | On-premises UPN |*
 | User | mailnickname | Mail Nickname |
 | User | extensionattribute1 | Extension Attribute 1 |
 | User | extensionattribute2 | Extension Attribute 2 |
@@ -336,6 +336,8 @@ The ID element identifies which property on the source provides the value for th
 - The JwtClaimType must contain the name of the claim to be emitted in JWTs.
 - The SamlClaimType must contain the URI of the claim to be emitted in SAML tokens.
 
+* **onPremisesUserPrincipalName attribute:** When using an Alternate ID, the on-premises attribute userPrincipalName is synchronized with the Azure AD attribute onPremisesUserPrincipalName. This attribute is only available when Alternate ID is configured but is also available through MS Graph Beta: https://graph.microsoft.com/beta/me/.
+
 > [!NOTE]
 > Names and URIs of claims in the restricted claim set cannot be used for the claim type elements. For more information, see the "Exceptions and restrictions" section later in this article.
 
@@ -527,4 +529,4 @@ In this example, you create a policy that emits a custom claim "JoinedData" to J
 ## See also
 
 - To learn how to customize claims issued in the SAML token through the Azure portal, see [How to: Customize claims issued in the SAML token for enterprise applications](active-directory-saml-claims-customization.md)
-- To learn more about extension attributes, see [Using directory schema extension attributes in claims](active-directory-schema-extensions.md).
+- To learn more about extension attributes, see [Using directory schema extension attributes in claims](active-directory-schema-extensions.md).

articles/active-directory/develop/active-directory-graph-api.md

@@ -18,7 +18,7 @@ ms.custom: aaddev, identityplatformtop40
 # Azure Active Directory Graph API
 
 > [!IMPORTANT]
-> We strongly recommend that you use [Microsoft Graph](https://developer.microsoft.com/graph) instead of Azure AD Graph API to access Azure Active Directory (Azure AD) resources. Our development efforts are now concentrated on Microsoft Graph and no further enhancements are planned for Azure AD Graph API. There are a very limited number of scenarios for which Azure AD Graph API might still be appropriate; for more information, see the [Microsoft Graph or the Azure AD Graph](https://developer.microsoft.com/office/blogs/microsoft-graph-or-azure-ad-graph/) blog post and [Migrate Azure AD Graph apps to Microsoft Graph](/graph/migrate-azure-ad-graph-overview).
+> We strongly recommend that you use [Microsoft Graph](https://developer.microsoft.com/graph) instead of Azure AD Graph API to access Azure Active Directory (Azure AD) resources. Our development efforts are now concentrated on Microsoft Graph and no further enhancements are planned for Azure AD Graph API. There are a very limited number of scenarios for which Azure AD Graph API might still be appropriate; for more information, see the [Microsoft Graph or the Azure AD Graph](https://developer.microsoft.com/office/blogs/microsoft-graph-or-azure-ad-graph/) blog post and [Migrate Azure AD Graph apps to Microsoft Graph](/graph/migrate-azure-ad-graph-planning-checklist).
 
 This article applies to Azure AD Graph API. For similar info related to Microsoft Graph API, see [Use the Microsoft Graph API](/graph/use-the-api).
 
@@ -62,4 +62,4 @@ Azure AD Graph API enables many application scenarios. The following scenarios a
 To begin using the Azure Active Directory Graph API, see the following topics:
 
 * [Azure AD Graph API quickstart guide](./microsoft-graph-intro.md)
-* [Azure AD Graph REST documentation](/previous-versions/azure/ad/graph/api/api-catalog)
+* [Azure AD Graph REST documentation](/previous-versions/azure/ad/graph/api/api-catalog)