Merge pull request #221217 from MicrosoftDocs/main

12/12 PM Publish

Author: huypub

.openpublishing.publish.config.json

@@ -152,6 +152,12 @@
       "branch": "master",
       "branch_mapping": {}
     },
+    {
+      "path_to_root": "functions-azure-product",
+      "url": "https://github.com/Azure/Azure-Functions",
+      "branch": "main",
+      "branch_mapping": {}
+    },
     {
       "path_to_root": "functions-pytorch",
       "url": "https://github.com/Azure-Samples/functions-python-pytorch-tutorial",

articles/active-directory-b2c/partner-cloudflare.md

@@ -1,23 +1,21 @@
 ---
 title: Tutorial to configure Azure Active Directory B2C with Cloudflare Web Application Firewall
 titleSuffix: Azure AD B2C
-description: Tutorial to configure Azure Active Directory B2C with Cloudflare Web application firewall to protect your applications from malicious attacks 
+description: Tutorial to configure Azure Active Directory B2C with Cloudflare Web application firewall and protect applications from malicious attacks 
 services: active-directory-b2c
 author: gargi-sinha
-manager: CelesteDG
+manager: martinco
 ms.reviewer: kengaderdus
-
 ms.service: active-directory
 ms.workload: identity
 ms.topic: how-to
-ms.date: 09/13/2022
+ms.date: 12/6/2022
 ms.author: gasinh
 ms.subservice: B2C
 ---
+# Tutorial: Configure Cloudflare Web Application Firewall with Azure Active Directory B2C
 
-# Tutorial: Configure Cloudflare with Azure Active Directory B2C
-
-In this sample tutorial, learn how to enable [Cloudflare Web Application Firewall (WAF)](https://www.cloudflare.com/waf/) solution for Azure Active Directory (AD) B2C tenant with custom domain. Cloudflare WAF helps organization protect against malicious attacks that aim to exploit vulnerabilities such as SQLi, and XSS.
+In this tutorial, you can learn how to configure the [Cloudflare Web Application Firewall (WAF)](https://www.cloudflare.com/waf/) solution for Azure Active Directory B2C (Azure AD B2C) tenant with custom domain. Use Cloudflare WAF to help protect organizations from malicious attacks that can exploit vulnerabilities such as SQL Injection, and cross-site scripting (XSS).
 
 >[!NOTE]
 >This feature is in public preview.
@@ -26,74 +24,71 @@ In this sample tutorial, learn how to enable [Cloudflare Web Application Firewal
 
 To get started, you'll need:
 
-- An Azure subscription. If you don't have a subscription, you can get a [free account](https://azure.microsoft.com/free/).
-
-- [An Azure AD B2C tenant](tutorial-create-tenant.md) that is linked to your Azure subscription.
-
-- A [Cloudflare](https://dash.cloudflare.com/sign-up) account.
+- An Azure subscription 
+  - If you don't have one, you can get an [Azure free account](https://azure.microsoft.com/free/)
+- [An Azure AD B2C tenant](tutorial-create-tenant.md) linked to your Azure subscription
+- A [Cloudflare](https://dash.cloudflare.com/sign-up) account
 
 ## Scenario description
 
 Cloudflare WAF integration includes the following components:
 
-- **Azure AD B2C Tenant** – The authorization server, responsible for verifying the user’s credentials using the custom policies defined in the tenant.  It's also known as the identity provider.
-
-- [**Azure Front Door**](../frontdoor/front-door-overview.md) – Responsible for enabling custom domains for Azure B2C tenant. All traffic from Cloudflare WAF will be routed to Azure Front Door before arriving at Azure AD B2C tenant.
-
-- **Cloudflare** – The web application firewall, which manages all traffic that is sent to the authorization server.
+- **Azure AD B2C tenant** – The authorization server that verifies user credentials using the custom policies defined in the tenant. It's known as the identity provider
+- [**Azure Front Door**](../frontdoor/front-door-overview.md) – Enables custom domains for Azure B2C tenant. Traffic from Cloudflare WAF is routed to Azure Front Door before arriving at Azure AD B2C tenant.
+- **Cloudflare** – The web application firewall that manages traffic sent to the authorization server
 
 ## Integrate with Azure AD B2C
 
-To use custom domains in Azure AD B2C, it's required to use custom domain feature provided by Azure Front Door. Learn how to [enable Azure AD B2C custom domains](./custom-domain.md?pivots=b2c-user-flow).  
+For custom domains in Azure AD B2C, use the custom domain feature in Azure Front Door. Learn how to [enable Azure AD B2C custom domains](./custom-domain.md?pivots=b2c-user-flow).  
 
-After custom domain for Azure AD B2C is successfully configured using Azure Front Door, [test the custom domain](./custom-domain.md?pivots=b2c-custom-policy#test-your-custom-domain) before proceeding further.  
+After a custom domain for Azure AD B2C is configured using Azure Front Door, [test the custom domain](./custom-domain.md?pivots=b2c-custom-policy#test-your-custom-domain) before proceeding.  
 
-## Onboard with Cloudflare
+## Create a Cloudflare account
 
-[Sign-up](https://dash.cloudflare.com/sign-up) and create a Cloudflare account. To enable WAF, a minimum of [Pro SKU](https://www.cloudflare.com/plans/) is required.
+On cloudflare.com, you can [create an account](https://dash.cloudflare.com/sign-up). To enable WAF, on [Application Services]([https://www.cloudflare.com/plans/](https://www.cloudflare.com/plans/#price-matrix) select **Pro**, which is required.
 
 ### Configure DNS
 
-1. To enable WAF for a domain, you must **turn-on the proxy setting** from the DNS console for the CNAME entry as shown in the example for domain id.contosobank.co.uk.
+1. To enable WAF for a domain, in the DNS console for the CNAME entry, turn on the proxy setting from the DNS console for the CNAME entry as shown.
 
-   ![Image shows how to select proxy settings](./media/partner-cloudflare/select-proxy-settings.png)
+    ![Screenshot of proxy settings.](./media/partner-cloudflare/select-proxy-settings.png)
 
-1. Toggle the **Proxy status** option available under the DNS pane.
+2. Under the DNS pane, toggle the **Proxy status** option to **Proxied**. It turns orange.
 
-1. After you switch it to **Proxied**, it would turn orange. The final setting should look like:
+The settings appear in the following image.
 
-   ![Image shows how to select proxied](./media/partner-cloudflare/select-proxied.png)
+   ![Screenshot of proxied status.](./media/partner-cloudflare/select-proxied.png)
 
-### Configure WAF
+### Configure the Web Application Firewall
 
-[Configure WAF](https://www.cloudflare.com/waf/) in your Cloudflare settings.
+Go to your Cloudflare settings, and use the Cloudflare content to [configure the WAF](https://www.cloudflare.com/waf/) and learn about other security tools. 
 
 ### Configure firewall rule
 
-Add, update, or remove firewall rules using the firewall option available in the top pane of the console. For example, following firewall setting enables CAPTCHA for all incoming requests to *contosobank.co.uk* domain before the request is sent to Azure Front Door. Learn more about [setting firewall rules](https://support.cloudflare.com/hc/articles/360016473712-Cloudflare-Firewall-Rules).
-
-![Image shows how to enforce captcha](./media/partner-cloudflare/configure-firewall-rule.png)
+In the top pane of the console, use the firewall option to add, update, or remove firewall rules. For example, the following firewall setting enables CAPTCHA for incoming requests to *contosobank.co.uk* domain before the request goes to Azure Front Door.
 
-### Test the settings
+   ![Screenshot of enforcing captcha.](./media/partner-cloudflare/configure-firewall-rule.png)
 
-1. After saving the rule, it's required to complete CAPTCHA every time access to custom domain is requested.
+Learn more: [Cloudflare Firewall Rules](https://support.cloudflare.com/hc/articles/360016473712-Cloudflare-Firewall-Rules)
 
-   ![Image shows cloudflare waf enforce CAPTCHA](./media/partner-cloudflare/enforce-captcha.png)
+### Test the settings
 
-   > [!NOTE]
-   > Cloudflare also provides various [**other options**](https://support.cloudflare.com/hc/en-us/articles/200172706-Configuring-Custom-Pages-Error-and-Challenge-) to create customized  block pages.  
+1. Complete CAPTCHA when access to the custom domain is requested.
 
-2. User is taken to Azure AD B2C policy after successfully completing CAPTCHA.
+    ![Screenshot of Cloudflare WAF enforce CAPTCHA.](./media/partner-cloudflare/enforce-captcha.png)
 
-   ![Image shows Azure AD B2C policy login](./media/partner-cloudflare/azure-ad-b2c-policy.png)
+> [!NOTE]
+> Cloudflare has functionality to customize block pages. See, [Configuring Custom Pages (Error and Challenge)](https://support.cloudflare.com/hc/en-us/articles/200172706-Configuring-Custom-Pages-Error-and-Challenge-).  
 
+2. The Azure AD B2C policy sign-in dialog appears.
 
-## Additional resources
+    ![Screenshot of Azure AD B2C policy sign-in.](./media/partner-cloudflare/azure-ad-b2c-policy.png)
 
-- [Troubleshoot Cloudflare custom page issues](https://support.cloudflare.com/hc/en-us/articles/200172706-Configuring-Custom-Pages-Error-and-Challenge-#5QWV2KVjLnaAQ8L4tjiguw)
+## Resources
 
+- Cloudflare: [Troubleshoot common custom pages issues](https://support.cloudflare.com/hc/en-us/articles/200172706-Configuring-Custom-Pages-Error-and-Challenge-#5QWV2KVjLnaAQ8L4tjiguw)
 - [Get started with custom policies in Azure AD B2C](./tutorial-create-user-flows.md?pivots=b2c-custom-policy&tabs=applications)
 
 ## Next steps 
- 
-- [Configure a custom domain in Azure AD B2C](./custom-domain.md?pivots=b2c-user-flow)
+
+[Configure a custom domain in Azure AD B2C](./custom-domain.md?pivots=b2c-user-flow)