Merge branch 'master' of https://github.com/microsoftdocs/azure-docs-pr into akv-throt

Author: msmbaldwin

articles/active-directory/authentication/active-directory-certificate-based-authentication-get-started.md

@@ -33,7 +33,7 @@ This topic:
 
 To configure certificate-based authentication, the following statements must be true:
 
-- Certificate-based authentication (CBA) is only supported for Federated environments for browser applications or native clients using modern authentication (ADAL). The one exception is Exchange Active Sync (EAS) for Exchange Online (EXO), which can be used for  federated and managed accounts.
+- Certificate-based authentication (CBA) is only supported for Federated environments for browser applications, native clients using modern authentication (ADAL), or MSAL libraries. The one exception is Exchange Active Sync (EAS) for Exchange Online (EXO), which can be used for  federated and managed accounts.
 - The root certificate authority and any intermediate certificate authorities must be configured in Azure Active Directory.
 - Each certificate authority must have a certificate revocation list (CRL) that can be referenced via an internet-facing URL.
 - You must have at least one certificate authority configured in Azure Active Directory. You can find related steps in the [Configure the certificate authorities](#step-2-configure-the-certificate-authorities) section.

articles/active-directory/authentication/howto-mfa-userstates.md

@@ -38,11 +38,14 @@ Enabled by Azure AD Identity Protection - This method uses the Azure AD Identity
 
 User accounts in Azure Multi-Factor Authentication have the following three distinct states:
 
+> [!IMPORTANT]
+> Enabling Azure MFA through a Conditional Access policy will not change the state of the user. Do not be alarmed users appear disabled. Conditional Access does not change the state. **Organizations should not enable or enforce users if they are utilizing Conditional Access policies.**
+
 | Status | Description | Non-browser apps affected | Browser apps affected | Modern authentication affected |
-|:---:|:---:|:---:|:--:|:--:|
-| Disabled |The default state for a new user not enrolled in Azure MFA. |No |No |No |
-| Enabled |The user has been enrolled in Azure MFA, but has not registered. They receive a prompt to register the next time they sign in. |No.  They continue to work until the registration process is completed. | Yes. After the session expires, Azure MFA registration is required.| Yes. After the access token expires, Azure MFA registration is required. |
-| Enforced |The user has been enrolled and has completed the registration process for Azure MFA. |Yes. Apps require app passwords. |Yes. Azure MFA is required at login. | Yes. Azure MFA is required at login. |
+|:---:| --- |:---:|:--:|:--:|
+| Disabled | The default state for a new user not enrolled in Azure MFA. | No | No | No |
+| Enabled | The user has been enrolled in Azure MFA, but has not registered. They receive a prompt to register the next time they sign in. | No.  They continue to work until the registration process is completed. | Yes. After the session expires, Azure MFA registration is required.| Yes. After the access token expires, Azure MFA registration is required. |
+| Enforced | The user has been enrolled and has completed the registration process for Azure MFA. | Yes. Apps require app passwords. | Yes. Azure MFA is required at login. | Yes. Azure MFA is required at login. |
 
 A user's state reflects whether an admin has enrolled them in Azure MFA, and whether they completed the registration process.
 

articles/active-directory/manage-apps/configure-admin-consent-workflow.md

@@ -29,10 +29,10 @@ To approve requests, a reviewer must be a global administrator, cloud applicatio
 
 To enable the admin consent workflow and choose reviewers:
 
-1. Sign in to the [Azure portal](https://portal.azure.com) as a global administrator.
-2. Click **All services** at the top of the left-hand navigation menu. The **Azure Active Directory Extension** opens.
-3. In the filter search box, type "**Azure Active Directory**" and select **the Azure Active Directory** item.
-4. From the navigation menu, click **Enterprise applications**. 
+1. Sign in to the [Azure portal](https://portal.azure.com) as a global administrator.
+2. Click **All services** at the top of the left-hand navigation menu. The **Azure Active Directory Extension** opens.
+3. In the filter search box, type "**Azure Active Directory**" and select **the Azure Active Directory** item.
+4. From the navigation menu, click **Enterprise applications**. 
 5. Under **Manage**, select **User settings**.
 6. Under **Admin consent requests (Preview)**, set **Users can request admin consent to apps they are unable to consent to** to **Yes**.
 
@@ -70,10 +70,10 @@ After the admin consent workflow is enabled, users can request admin approval fo
 
 To review the admin consent requests and take action:
 
-1. Sign in to the [Azure portal](https://portal.azure.com) as one of the registered reviewers of the admin consent workflow.
-2. Select **All services** at the top of the left-hand navigation menu. The **Azure Active Directory Extension** opens.
-3. In the filter search box, type "**Azure Active Directory**" and select the **Azure Active Directory** item.
-4. From the navigation menu, click **Enterprise applications**.
+1. Sign in to the [Azure portal](https://portal.azure.com) as one of the registered reviewers of the admin consent workflow.
+2. Select **All services** at the top of the left-hand navigation menu. The **Azure Active Directory Extension** opens.
+3. In the filter search box, type "**Azure Active Directory**" and select the **Azure Active Directory** item.
+4. From the navigation menu, click **Enterprise applications**.
 5. Under **Activity**, select **Admin consent requests (Preview)**.
 
    > [!NOTE]
@@ -116,12 +116,12 @@ The table below outlines the scenarios and audit values available for the admin
 
 |Scenario  |Audit Service  |Audit Category  |Audit Activity  |Audit Actor  |Audit log limitations  |
 |---------|---------|---------|---------|---------|---------|
-|Admin enabling the consent request workflow        |Access Reviews           |UserManagement           |Create governance policy template          |App context            |Currently you cannot find the user context            |
-|Admin disabling the  consent request workflow       |Access Reviews           |UserManagement           |Delete governance policy template          |App context            |Currently you cannot find the user context           |
-|Admin updating the consent workflow configurations        |Access Reviews           |UserManagement           |Update governance policy template          |App context            |Currently you cannot find the user context           |
-|End user creating an admin consent request for an app       |Access Reviews           |Policy         |Create request           |App context            |Currently you cannot find the user context           |
-|Reviewers approving an admin consent request       |Access Reviews           |UserManagement           |Approve all requests in business flow          |App context            |Currently you cannot find the user context or the app ID that was granted admin consent.           |
-|Reviewers denying an admin consent request       |Access Reviews           |UserManagement           |Approve all requests in business flow          |App context            | Currently you cannot find the user context of the actor that denied an admin consent request          |
+|Admin enabling the consent request workflow        |Access Reviews           |UserManagement           |Create governance policy template          |App context            |Currently you cannot find the user context            |
+|Admin disabling the  consent request workflow       |Access Reviews           |UserManagement           |Delete governance policy template          |App context            |Currently you cannot find the user context           |
+|Admin updating the consent workflow configurations        |Access Reviews           |UserManagement           |Update governance policy template          |App context            |Currently you cannot find the user context           |
+|End user creating an admin consent request for an app       |Access Reviews           |Policy         |Create request           |App context            |Currently you cannot find the user context           |
+|Reviewers approving an admin consent request       |Access Reviews           |UserManagement           |Approve all requests in business flow          |App context            |Currently you cannot find the user context or the app ID that was granted admin consent.           |
+|Reviewers denying an admin consent request       |Access Reviews           |UserManagement           |Approve all requests in business flow          |App context            | Currently you cannot find the user context of the actor that denied an admin consent request          |
 
 ## FAQ 
 

articles/azure-resource-manager/deployment-manager-tutorial-health-check.md

@@ -1,6 +1,6 @@
 ---
-title: Use Azure Deployment Manager with templates
-description: Use Resource Manager templates with Azure Deployment Manager to deploy Azure resources.
+title: Use Azure Deployment Manager health check
+description: Use health check to safely deploy Azure resources with Azure Deployment Manager.
 author: mumian
 ms.date: 10/09/2019
 ms.topic: tutorial

articles/azure-resource-manager/deployment-manager-tutorial.md

@@ -1,6 +1,6 @@
 ---
-title: Use Azure Deployment Manager with Resource Manager templates | Microsoft Docs
-description: Use Resource Manager templates with Azure Deployment Manager to deploy Azure resources.
+title: Use Azure Deployment Manager to deploy templates
+description: Learn how to use Resource Manager templates with Azure Deployment Manager to deploy Azure resources.
 author: mumian
 ms.date: 11/21/2019
 ms.topic: tutorial

articles/cognitive-services/Speech-Service/includes/quickstarts/from-microphone/cpp/linux.md

@@ -14,12 +14,13 @@ ms.author: wolfma
 
 ## Prerequisites
 
-Before you get started, make sure to:
+Before you get started:
 
 > [!div class="checklist"]
 > * [Create an Azure Speech Resource](../../../../get-started.md)
 > * [Setup your development environment](../../../../quickstarts/setup-platform.md?tabs=linux)
 > * [Create an empty sample project](../../../../quickstarts/create-project.md?tabs=linux)
+> * Make sure that you have access to a microphone for audio capture
 
 ## Add sample code
 

articles/cognitive-services/Speech-Service/includes/quickstarts/from-microphone/cpp/macos.md

@@ -14,12 +14,13 @@ ms.author: wolfma
 
 ## Prerequisites
 
-Before you get started, make sure to:
+Before you get started:
 
 > [!div class="checklist"]
 > * [Create an Azure Speech Resource](../../../../get-started.md)
 > * [Setup your development environment](../../../../quickstarts/setup-platform.md?tabs=macos)
 > * [Create an empty sample project](../../../../quickstarts/create-project.md?tabs=macos)
+> * Make sure that you have access to a microphone for audio capture
 
 ## Add sample code
 

articles/cognitive-services/Speech-Service/includes/quickstarts/from-microphone/cpp/windows.md

@@ -14,12 +14,13 @@ ms.author: wolfma
 
 ## Prerequisites
 
-Before you get started, make sure to:
+Before you get started:
 
 > [!div class="checklist"]
 > * [Create an Azure Speech Resource](../../../../get-started.md)
 > * [Setup your development environment](../../../../quickstarts/setup-platform.md?tabs=windows)
 > * [Create an empty sample project](../../../../quickstarts/create-project.md?tabs=windows)
+> * Make sure that you have access to a microphone for audio capture
 
 ## Add sample code
 

articles/cognitive-services/Speech-Service/includes/quickstarts/from-microphone/csharp/dotnet.md

@@ -14,12 +14,13 @@ ms.author: erhopf
 
 ## Prerequisites
 
-Before you get started, make sure to:
+Before you get started:
 
 > [!div class="checklist"]
 > * [Create an Azure Speech Resource](../../../../get-started.md)
 > * [Setup your development environment](../../../../quickstarts/setup-platform.md?tabs=dotnet)
 > * [Create an empty sample project](../../../../quickstarts/create-project.md?tabs=dotnet)
+> * Make sure that you have access to a microphone for audio capture
 
 ## Open your project in Visual Studio
 

articles/cognitive-services/Speech-Service/includes/quickstarts/from-microphone/csharp/unity.md

@@ -18,12 +18,14 @@ ms.author: erhopf
 
 ## Prerequisites
 
-Before you get started, make sure to:
+Before you get started:
 
 > [!div class="checklist"]
 > * [Create an Azure Speech Resource](../../../../get-started.md)
 > * [Setup your development environment](../../../../quickstarts/setup-platform.md?tabs=unity)
 > * [Create an empty sample project](../../../../quickstarts/create-project.md?tabs=unity)
+> * Make sure that you have access to a microphone for audio capture
+
 If you've already done this, great. Let's keep going.
 
 ## Create a Unity project