Merge pull request #110755 from MicrosoftDocs/master

4/08 PM Publish

Author: huypub

.openpublishing.redirection.json

@@ -27475,11 +27475,6 @@
       "redirect_url": "/azure/storage/blobs/storage-custom-domain-name",
       "redirect_document_id": true
     },
-    {
-      "source_path": "articles/storage/storage-decide-blobs-files-disks.md",
-      "redirect_url": "/azure/storage/common/storage-decide-blobs-files-disks",
-      "redirect_document_id": true
-    },
     {
       "source_path": "articles/storage/storage-designing-ha-apps-with-ragrs.md",
       "redirect_url": "/azure/storage/common/storage-designing-ha-apps-with-ragrs",
@@ -27780,11 +27775,6 @@
       "redirect_url": "/azure/virtual-machines/windows/incremental-snapshots",
       "redirect_document_id": true
     },
-    {
-      "source_path": "articles/storage/storage-introduction.md",
-      "redirect_url": "/azure/storage/common/storage-introduction",
-      "redirect_document_id": true
-    },
     {
       "source_path": "articles/storage/storage-ios-how-to-use-blob-storage.md",
       "redirect_url": "/azure/storage/blobs/storage-ios-how-to-use-blob-storage",
@@ -39925,6 +39915,11 @@
       "redirect_url": "/azure/app-service/app-service-web-get-started-java",
       "redirect_document_id": false
     },
+    {
+      "source_path": "articles/storage/common/storage-decide-blobs-files-disks.md",
+      "redirect_url": "/azure/storage/common/storage-introduction",
+      "redirect_document_id": true
+    },
     {
       "source_path": "articles/cognitive-services/LUIS/luis-get-started-php-add-utterance.md",
       "redirect_url": "/azure/cognitive-services/LUIS/",

articles/active-directory/azuread-dev/active-directory-devhowto-adal-error-handling.md

@@ -538,7 +538,7 @@ To explore specific ADAL errors, the source code in the [azure-activedirectory-l
 
 #### Operating system errors
 
-iOS errors may arise during sign-in when users use web views, and the nature of authentication. This can be caused by conditions such as SSL errors, timeouts, or network errors:
+iOS errors may arise during sign-in when users use web views, and the nature of authentication. This can be caused by conditions such as TLS errors, timeouts, or network errors:
 
 - For Entitlement Sharing, logins are not persistent and the cache appears empty. You can resolve by adding the following line of code to the keychain:
   `[[ADAuthenticationSettings sharedInstance] setSharedCacheKeychainGroup:nil];`

articles/active-directory/develop/apple-sso-plugin.md

@@ -23,7 +23,7 @@ ms.custom: aaddev
 > This preview version is provided without a service level agreement, and it's not recommended for production workloads. Certain features might not be supported or might have constrained capabilities.
 > For more information, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
 
-The *Microsoft Enterprise SSO plug-in for Apple devices* provides single sign-on (SSO) for Active Directory accounts across all applications that support Apple's [Enterprise Single Sign-On](https://developer.apple.com/documentation/authenticationservices) feature. Microsoft worked closely with Apple to develop this plug-in to increase your application's usability while providing the best protection that Apple and Microsoft can provide.
+The *Microsoft Enterprise SSO plug-in for Apple devices* provides single sign-on (SSO) for Azure Active Directory (Azure AD) accounts across all applications that support Apple's [Enterprise Single Sign-On](https://developer.apple.com/documentation/authenticationservices) feature. Microsoft worked closely with Apple to develop this plug-in to increase your application's usability while providing the best protection that Apple and Microsoft can provide.
 
 In this Public Preview release, the Enterprise SSO plug-in is available only for iOS devices and is distributed in certain Microsoft applications.
 
@@ -33,7 +33,7 @@ Our first use of the Enterprise SSO plug-in is with our new [shared device mode]
 
 The Microsoft Enterprise SSO plug-in for Apple devices offers the following benefits:
 
-- Provides SSO for Active Directory accounts across all applications that support Apple's Enterprise Single Sign-On feature.
+- Provides SSO for Azure AD accounts across all applications that support Apple's Enterprise Single Sign-On feature.
 - Delivered automatically in the Microsoft Authenticator and can be enabled by any mobile device management (MDM) solution.
 
 ## Requirements

articles/active-directory/develop/tutorial-v2-javascript-spa.md

@@ -346,6 +346,18 @@ Create a new .js file named `authPopup.js`, which will contain your authenticati
    function signOut() {
      myMSALObj.logout();
    }
+   
+   function callMSGraph(theUrl, accessToken, callback) {
+       var xmlHttp = new XMLHttpRequest();
+       xmlHttp.onreadystatechange = function () {
+           if (this.readyState == 4 && this.status == 200) {
+              callback(JSON.parse(this.responseText));
+           }
+       }
+       xmlHttp.open("GET", theUrl, true); // true for asynchronous
+       xmlHttp.setRequestHeader('Authorization', 'Bearer ' + accessToken);
+       xmlHttp.send();
+   }
 
    function getTokenPopup(request) {
      return myMSALObj.acquireTokenSilent(request)

articles/active-directory/fundamentals/active-directory-manage-groups.md

@@ -20,8 +20,6 @@ ms.collection: M365-identity-device-management
 Azure Active Directory (Azure AD) lets you use groups to manage access to your cloud-based apps, on-premises apps, and your resources. Your resources can be part of the Azure AD organization, such as permissions to manage objects through roles in Azure AD, or external to the organization, such as for Software as a Service (SaaS) apps, Azure services, SharePoint sites, and on-premises resources.
 
 >[!NOTE]
->To use Azure Active Directory, you need an Azure account. If you don't have an account, you can [sign up for a free Azure account](https://azure.microsoft.com/free/).
->
 > In the Azure portal, you can see some groups whose membership and group details you can't manage in the portal:
 >
 > - Groups synced from on-premises Active Directory can be managed only in on-premises Active Directory.

articles/active-directory/governance/create-access-review.md

@@ -11,7 +11,7 @@ ms.tgt_pltfrm: na
 ms.devlang: na
 ms.topic: conceptual
 ms.subservice: compliance
-ms.date: 03/22/2020
+ms.date: 04/08/2020
 ms.author: barclayn
 ms.reviewer: mwahl
 ms.collection: M365-identity-device-management

articles/active-directory/governance/media/create-access-review/select-application.png

@@ -79,7 +79,7 @@ Abandon the existing encryption key so that new encryption key can be created:
 
 2. Start a new PowerShell session.
 
-3. Navigate to folder: `$env:Program Files\Microsoft Azure AD Sync\bin\`
+3. Navigate to folder: `'$env:ProgramFiles\Microsoft Azure AD Sync\bin\'`
 
 4. Run the command: `./miiskmu.exe /a`
 

articles/active-directory/hybrid/how-to-connect-sync-change-serviceacct-pass.md

@@ -46,6 +46,7 @@ The geos in Office 365 available for Multi-Geo are:
 | Japan | JPN |
 | Korea | KOR |
 | South Africa | ZAF |
+| Switzerland | CHE |
 | United Arab Emirates | ARE |
 | United Kingdom | GBR |
 | United States | NAM |

articles/active-directory/hybrid/how-to-connect-sync-feature-preferreddatalocation.md

@@ -84,12 +84,14 @@ Set-MsolDirSyncFeature -Feature EnableSoftMatchOnUpn -Enable $true
 
 ## Synchronize userPrincipalName updates
 
-Historically, updates to the UserPrincipalName attribute using the sync service from on-premises has been blocked, unless both of these conditions are true:
+Historically, updates to the UserPrincipalName attribute using the sync service from on-premises has been blocked, unless both of these conditions were true:
 
 * The user is managed (non-federated).
 * The user has not been assigned a license.
 
-For more details, see [User names in Office 365, Azure, or Intune don't match the on-premises UPN or alternate login ID](https://support.microsoft.com/kb/2523192).
+> [!NOTE]
+> From March 2019, synchronizing UPN changes for federated user accounts is allowed.
+> 
 
 Enabling this feature allows the sync engine to update the userPrincipalName when it is changed on-premises and you use password hash sync or pass-through authentication.