Merge pull request #107026 from MicrosoftDocs/master

3/09 PM Publish

Author: huypub

.openpublishing.redirection.json

@@ -8472,7 +8472,12 @@
     },
     {
       "source_path": "articles/app-service-web/web-sites-traffic-manager-custom-domain-name.md",
-      "redirect_url": "/azure/app-service/web-sites-traffic-manager-custom-domain-name",
+      "redirect_url": "/azure/app-service/configure-domain-traffic-manager",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/app-service/web-sites-traffic-manager-custom-domain-name.md",
+      "redirect_url": "/azure/app-service/configure-domain-traffic-manager",
       "redirect_document_id": false
     },
     {
@@ -49200,6 +49205,16 @@
       "source_path": "articles/cognitive-services/Speech-Service/sapi-phoneset-usage.md",
       "redirect_url": "/azure/cognitive-services/speech-service/speech-ssml-phonetic-sets",
       "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/cognitive-services/Speech-Service/how-to-use-codec-compressed-audio-input-streams-android.md",
+      "redirect_url": "/azure/cognitive-services/Speech-Service/how-to-use-codec-compressed-audio-input-streams?pivots=programming-language-java",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/cognitive-services/Speech-Service/how-to-use-codec-compressed-audio-input-streams-ios.md",
+      "redirect_url": "/azure/cognitive-services/Speech-Service/how-to-use-codec-compressed-audio-input-streams?pivots=programming-language-objectivec",
+      "redirect_document_id": false
     }
   ]
 }

articles/active-directory-b2c/active-directory-technical-profile.md

@@ -52,7 +52,7 @@ The following example shows the **AAD-Common** technical profile:
 </TechnicalProfile>
 ```
 
-## Input claims
+## InputClaims
 
 The InputClaims element contains a claim, which is used to look up an account in the directory, or create a new one. There must be exactly one InputClaim element in the input claims collection for all Azure AD technical profiles. You may need to map the name of the claim defined in your policy to the name defined in Azure Active Directory.
 
@@ -62,7 +62,7 @@ To create a new user account, the input claim is a key that uniquely identifies
 
 The InputClaimsTransformations element may contain a collection of input claims transformation elements that are used to modify the input claim or generate new one.
 
-## Output claims
+## OutputClaims
 
 The **OutputClaims** element contains a list of claims returned by the Azure AD technical profile. You may need to map the name of the claim defined in your policy to the name defined in Azure Active Directory. You can also include claims that aren't returned by the Azure Active Directory, as long as you set the `DefaultValue` attribute.
 

articles/active-directory-domain-services/faqs.md

@@ -10,7 +10,7 @@ ms.service: active-directory
 ms.subservice: domain-services
 ms.workload: identity
 ms.topic: conceptual
-ms.date: 01/21/2020
+ms.date: 03/09/2020
 ms.author: iainfou
 
 ---
@@ -32,6 +32,7 @@ This page answers frequently asked questions about Azure Active Directory Domain
 * [Can I add domain controllers to an Azure AD Domain Services managed domain?](#can-i-add-domain-controllers-to-an-azure-ad-domain-services-managed-domain)
 * [Can guest users invited to my directory use Azure AD Domain Services?](#can-guest-users-invited-to-my-directory-use-azure-ad-domain-services)
 * [Can I move an existing Azure AD Domain Services managed domain to a different subscription, resource group, region, or virtual network?](#can-i-move-an-existing-azure-ad-domain-services-managed-domain-to-a-different-subscription-resource-group-region-or-virtual-network)
+* [Does Azure AD Domain Services include high availability options?](#does-azure-ad-domain-services-include-high-availability-options)
 
 ### Can I create multiple managed domains for a single Azure AD directory?
 No. You can only create a single managed domain serviced by Azure AD Domain Services for a single Azure AD directory.
@@ -71,6 +72,10 @@ No. Guest users invited to your Azure AD directory using the [Azure AD B2B](../a
 ### Can I move an existing Azure AD Domain Services managed domain to a different subscription, resource group, region, or virtual network?
 No. After you create an Azure AD Domain Services managed domain, you can't then move the instance to a different resource group, virtual network, subscription, etc. Take care to select the most appropriate subscription, resource group, region, and virtual network when you deploy the Azure AD DS instance.
 
+### Does Azure AD Domain Services include high availability options?
+
+Yes. Each Azure AD Domain Services managed domain includes two domain controllers. You don't manage or connect to these domain controllers, they're part of the managed service. If you deploy Azure AD Domain Services into a region that supports Availability Zones, the domain controllers are distributed across zones. In regions that don't support Availability Zones, the domain controllers are distributed across Availability Sets. You have no configuration options or management control over this distribution. For more information, see [Availability options for virtual machines in Azure](../virtual-machines/windows/availability.md).
+
 ## Administration and operations
 
 * [Can I connect to the domain controller for my managed domain using Remote Desktop?](#can-i-connect-to-the-domain-controller-for-my-managed-domain-using-remote-desktop)

articles/active-directory-domain-services/manage-group-policy.md

@@ -9,7 +9,7 @@ ms.service: active-directory
 ms.subservice: domain-services
 ms.workload: identity
 ms.topic: conceptual
-ms.date: 10/31/2019
+ms.date: 03/09/2020
 ms.author: iainfou
 
 ---
@@ -38,7 +38,11 @@ To complete this article, you need the following resources and privileges:
 * A user account that's a member of the *Azure AD DC administrators* group in your Azure AD tenant.
 
 > [!NOTE]
-> As there's [no access to domain controllers in Azure AD DS](faqs.md#can-i-connect-to-the-domain-controller-for-my-managed-domain-using-remote-desktop), you can't create and use a Central Store for group policy administrative templates in a managed domain. [Sysvol isn't included in on-premises Azure AD Connect synchronization](synchronization.md#what-isnt-synchronized-to-azure-ad-ds), so you also can't create an on-premises Central Store and synchronize it to Azure AD DS through Azure AD.
+> You can use Group Policy Administrative Templates by copying the new templates to the management workstation. Copy the *.admx* files into `%SYSTEMROOT%\PolicyDefinitions` and copy the locale-specific *.adml* files to `%SYSTEMROOT%\PolicyDefinitions\[Language-CountryRegion]`, where `Language-CountryRegion` matches the language and region of the *.adml* files.
+>
+> For example, copy the English, United States version of the *.adml* files into the `\en-us` folder.
+>
+> Alternatively, you can centrally store your Group Policy Administrative Template on the domain controllers that are part of the Azure AD DS managed domain. For more information, see [How to create and manage the Central Store for Group Policy Administrative Templates in Windows](https://support.microsoft.com/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administra).
 
 ## Install Group Policy Management tools
 

articles/active-directory/authentication/concept-registration-mfa-sspr-combined.md

@@ -6,7 +6,7 @@ services: active-directory
 ms.service: active-directory
 ms.subservice: authentication
 ms.topic: conceptual
-ms.date: 11/21/2019
+ms.date: 03/06/2020
 
 ms.author: iainfou
 author: iainfoulds
@@ -55,6 +55,7 @@ Combined registration supports the following authentication methods and actions:
 | Email | Yes | Yes | Yes |
 | Security questions | Yes | No | Yes |
 | App passwords | Yes | No | Yes |
+| FIDO2 security keys<br />*Managed mode only from the [Security info](https://mysignins.microsoft.com/security-info) page*| Yes | Yes | Yes |
 
 > [!NOTE]
 > App passwords are available only to users who have been enforced for Multi-Factor Authentication. App passwords are not available to users who are enabled for Multi-Factor Authentication via a Conditional Access policy.

articles/active-directory/authentication/howto-authentication-passwordless-security-key-on-premises.md

@@ -6,7 +6,7 @@ services: active-directory
 ms.service: active-directory
 ms.subservice: authentication
 ms.topic: conceptual
-ms.date: 01/30/2020
+ms.date: 03/09/2020
 
 ms.author: iainfou
 author: iainfoulds
@@ -47,6 +47,7 @@ Organizations must also meet the following software requirements.
 
 - Devices must be running Windows 10 Insider Build 18945 or newer.
 - You must have version 1.4.32.0 or later of [Azure AD Connect](../hybrid/how-to-connect-install-roadmap.md#install-azure-ad-connect).
+  - For more information on the available Azure AD hybrid authentication options, see [Choose the right authentication method for your Azure Active Directory hybrid identity solution](../../security/fundamentals/choose-ad-authn.md) and [Select which installation type to use for Azure AD Connect](../hybrid/how-to-connect-install-select-installation.md).
 - Your Windows Server domain controllers must have the following patches installed:
     - For Windows Server 2016 - https://support.microsoft.com/help/4534307/windows-10-update-kb4534307
 	- For Windows Server 2019 - https://support.microsoft.com/help/4534321/windows-10-update-kb4534321
@@ -197,4 +198,4 @@ Make sure enough domain controllers are patched to respond in time to service yo
 
 ## Next steps
 
-[Learn more about passwordless](concept-authentication-passwordless.md)
+[Learn more about passwordless](concept-authentication-passwordless.md)

articles/active-directory/develop/TOC.yml

@@ -1,11 +1,11 @@
-- name: Microsoft identity platform (Azure Active Directory for developers)
+- name: Microsoft identity platform documentation
   href: index.yml
 - name: Overview
   items:
   - name: What is Microsoft identity platform?
     href: v2-overview.md
   - name: Evolution of Microsoft identity platform
-    href: about-microsoft-identity-platform.md  
+    href: about-microsoft-identity-platform.md
 - name: Quickstarts
   expanded: true
   items:
@@ -237,7 +237,7 @@
       - name: Calling a web API
         href: scenario-mobile-call-api.md
       - name: Move to production
-        href: scenario-mobile-production.md      
+        href: scenario-mobile-production.md
   - name: Microsoft Authentication Library (MSAL)
     items:
     - name: Overview
@@ -305,7 +305,7 @@
       - name: Initialize applications - JavaScript
         href: msal-js-initializing-client-applications.md
     - name: Handle errors and exceptions
-      href: msal-handling-exceptions.md        
+      href: msal-handling-exceptions.md
     - name: Logging
       href: msal-logging.md
     - name: Single sign-on
@@ -343,14 +343,14 @@
         - name: MSAL.NET
           items:
           - name: Web browsers
-            href: msal-net-web-browsers.md              
+            href: msal-net-web-browsers.md
         - name: MSAL.js
           items:
           - name: Considerations - IE
             href: msal-js-use-ie-browser.md
           - name: Known issues - IE and Microsoft Edge
             href: msal-js-known-issues-ie-edge-browsers.md
-          - name: Known issues - Safari 
+          - name: Known issues - Safari
             href: msal-js-known-issues-safari-browser.md
         - name: Troubleshoot SSL issues (MSAL iOS/macOS)
           href: ssl-issues.md
@@ -359,7 +359,7 @@
     items:
     - name: Application types and OAuth 2.0
       displayName: App types, OAuth
-      href: v2-app-types.md      
+      href: v2-app-types.md
     - name: OAuth 2.0 and OpenID Connect protocols
       items:
       - name: OAuth 2.0 and OpenID Connect
@@ -507,7 +507,7 @@
           - name: Pass custom state in authentication requests
             href: msal-js-pass-custom-state-authentication-request.md
           - name: Prompt behavior
-            href: msal-js-prompt-behavior.md 
+            href: msal-js-prompt-behavior.md
       - name: MSAL for iOS and macOS
         items:
           - name: MSAL for iOS and macOS differences

articles/active-directory/develop/index.yml

@@ -1,7 +1,7 @@
 ### YamlMime:Landing
 
-title: Microsoft identity platform (formerly Azure Active Directory for developers)
-summary: Microsoft identity platform is an evolution of the Azure Active Directory (Azure AD) developer platform. It allows developers to build applications that sign in all Microsoft identities and get tokens to call Microsoft APIs such as Microsoft Graph or APIs that developers have built. It’s a full-featured platform that consists of an OAuth 2.0 and OpenID Connect standard-compliant authentication service, open-source libraries, application registration and configuration, robust conceptual and reference documentation, quickstart samples, code samples, tutorials, and how-to guides.
+title: Microsoft identity platform documentation
+summary: Microsoft identity platform allows developers to build applications that sign in all Microsoft identities and get tokens to call Microsoft APIs like Microsoft Graph, or APIs you've built. This full-featured platform consists of an OAuth 2.0 and OpenID Connect standard-compliant authentication service, open-source libraries, application registration and configuration, robust conceptual and reference documentation, quickstarts, code samples, tutorials, and how-to guides.
 
 metadata:
    ms.topic: landing-page
@@ -17,10 +17,10 @@ landingContent:
     linkLists:
       - linkListType: overview
         links:
-          - text: Evolution of Microsoft identity platform
-            url: about-microsoft-identity-platform.md
           - text: Microsoft identity platform (v2.0)
             url: v2-overview.md
+          - text: Evolution of Microsoft identity platform
+            url: about-microsoft-identity-platform.md
           - text: Azure Active Directory for developers (v1.0)
             url: ../azuread-dev/v1-overview.md
       - linkListType: concept