touchup

Author: v-thepet

articles/app-service/deploy-configure-credentials.md

@@ -11,18 +11,18 @@ ms.date: 06/27/2025
 
 # Manage deployment credentials for Azure App Service
 
-You can deploy local apps to [Azure App Service](overview.md) by using [local Git deployment](deploy-local-git.md) or [FTP/S deployment](deploy-ftp.md). App Service supports two types of credentials you can use for secure local app deployment, *user-scope* and *app-scope* credentials. These credentials are different from your Azure subscription credentials.
+You can deploy local apps to [Azure App Service](overview.md) by using [local Git deployment](deploy-local-git.md) or [FTP/S deployment](deploy-ftp.md). App Service supports two types of credentials you can use for secure local app deployment, *user-scope* and *app-scope* credentials. These deployment credentials are different from your Azure subscription credentials.
 
 [!INCLUDE [app-service-deploy-credentials](../../includes/app-service-deploy-credentials.md)]
 
 ## Prerequisites
 
-To access, set, or reset deployment user credentials, you must have contributor-level permissions on an Azure App Service app that you want to deploy by using local Git or FTP/S.
+To access, set, or reset deployment user credentials, you must have contributor-level permissions on an App Service app.
 
 <a name="disable-basic-authentication"></a>
 ### Basic authentication requirement
 
-Basic authentication must be enabled to publish App Service apps via local Git or FTP/S. Both **SCM Basic Auth Publishing Credentials** and **FTP Basic Auth Publishing Credentials** must be set to **On** on the app's **Configuration** page in the Azure portal.
+To publish App Service apps via local Git or FTP/S, basic authentication must be enabled. **SCM Basic Auth Publishing Credentials** and **FTP Basic Auth Publishing Credentials** must both be set to **On** on the app's **Configuration** page in the Azure portal.
 
 Basic authentication is less secure than other authentication methods and is disabled by default for new apps. When basic authentication is disabled, you can't view or set deployment credentials in the app's **Deployment Center** or use these credentials for publishing. For more information, see [Disable basic authentication in Azure App Service deployments](configure-basic-auth-disable.md).
 
@@ -31,11 +31,11 @@ Basic authentication is less secure than other authentication methods and is dis
 
 You can configure user-scope credentials by using Azure CLI or the Azure portal. 
 
-- For FTP/S deployment, you need both a user name and password.
-  - The user name must be unique within Azure and follow the format `<app-name>\<user-name>`. Since user-scope credentials are linked to the user and not to the app, the username must be in this format to direct the sign-in action to the FTP/S endpoint for the app.
-  - The password must be at least eight characters and contain capital letters, lowercase letters, numbers, and symbols. The JSON output shows the password as `null`.
-  
-- For local Git deployment, you only need a user name, which must be unique within Azure and can't contain the `@` character.
+- Both local Git and FTP/S deployment require a user name.
+  - The user name must be unique within Azure, and can't contain the `@` character.
+  - To authenticate to an FTP/S endpoint, the user name must follow the format `<app-name>\<user-name>`. Since user-scope credentials are linked to the user and not to the app, the username must be in this format to direct the sign-in action to the correct FTP/S endpoint for the app.
+
+- For FTP/S deployment only, you also need a password. The password must be at least eight characters and contain capital letters, lowercase letters, numbers, and symbols. The JSON output shows the password as `null`. Local Git deployment doesn't require a password.
 
 # [Azure CLI](#tab/cli)
 
@@ -44,11 +44,10 @@ To create user-scope credentials, run the [`az webapp deployment user set`](/cli
 ```azurecli-interactive
 az webapp deployment user set --user-name <username> --password <password>
 ```
-For local Git, you only need to provide a user name
 
 # [Azure PowerShell](#tab/powershell)
 
-You can't create user-scope credentials by using Azure PowerShell. Use Azure CLI or the Azure portal to create the credentials instead. Or you can use app-scope credentials to deploy to FTP/S or local Git.
+You can't create user-scope credentials by using Azure PowerShell. Use Azure CLI or the Azure portal to create the credentials, or use app-scope credentials to deploy to FTP/S or local Git.
 
 # [Azure portal](#tab/portal)
 
@@ -62,19 +61,19 @@ To configure deployment credentials:
 1. For FTP/S deployments, add and confirm a **Password**.
 1. Select **Save**.
 
-After you set the credentials, you can see your deployment user name on your app's **Overview** page. If local Git deployment is configured, the label is **Git/deployment username**. Otherwise, the label is **FTP/deployment username**. The page doesn't show the password.
+-----
 
-![Screenshot that shows you how to find the Git deployment user name on your app's Overview page.](./media/app-service-deployment-credentials/deployment_credentials_overview.png)
+After you set the credentials, you can see your deployment user name on your app's **Overview** page in the Azure portal. If local Git deployment is configured, the label is **Git/deployment username**. Otherwise, the label is **FTP/deployment username**. The page doesn't show the password.
 
------
+![Screenshot that shows the Git deployment user name on an app's Overview page.](./media/app-service-deployment-credentials/deployment_credentials_overview.png)
 
 <a name="appscope"></a>
 ## Get application-scope credentials
 
-The application-scope credentials are automatically created. The FTP/S app-scope user name always follows the format `app-name\$app-name`. The local Git user name uses the format `$app-name`.
+The application-scope credentials are automatically created along with the app. The FTP/S app-scope user name always follows the format `app-name\$app-name`. The local Git user name uses the format `$app-name`.
 
 >[!NOTE]
->When you use `git remote add` in shells that use the dollar sign for variable interpolation, such as Bash, you must use `\$` to escape any dollar signs in the username or password, to avoid authentication errors.
+>When you use `git remote add` in shells that use the dollar sign for variable interpolation, such as Bash, you must use `\$` to escape any dollar signs in the username or password to avoid authentication errors.
 
 You can get your app-scope credentials by using Azure CLI, Azure PowerShell, or the Azure portal.
 
@@ -144,10 +143,16 @@ Invoke-AzResourceAction -ResourceGroupName <group-name> -ResourceType Microsoft.
 
 # [Azure portal](#tab/portal)
 
-1. From the left navigation menu of your app, select **Deployment Center** > **FTPS credentials** or **Local Git/FTPS credentials**.
-1. To reset your app-scope credentials and get a new password, select **Reset** at the bottom of the **Application-scope** section.
-1. To reset your user-scope credentials, select **Reset** at the bottom of the **User-scope** section. This action deletes both user name and password, and disables user-scope credentials.
-1. To reenable and reset your user-scope credentials, enter a new username and password, and select **Save**. This action takes effect across all the apps in your account that use the user-scope credentials.
+From the left navigation menu of your app, select **Deployment Center** > **FTPS credentials** or **Local Git/FTPS credentials**.
+
+- To reset your app-scope credentials and get a new password, select **Reset** at the bottom of the **Application-scope** section.
+
+- To reset your user-scope credentials:
+
+  1. Select **Reset** at the bottom of the **User-scope** section. This action deletes both user name and password, and disables user-scope credentials.
+  1. To reenable and reset your user-scope credentials, enter a new username and password, and select **Save**.
+
+  This action takes effect across all the apps in your account that use the user-scope credentials.
 
 -----