Merge pull request #209896 from MicrosoftDocs/main

Merge main to live, 4 AM

Author: v-ccolin

.openpublishing.redirection.json

@@ -6928,6 +6928,11 @@
     "redirect_url":  "/azure/azure-government/compare-azure-government-global-azure",
     "redirect_document_id":  false
 },
+{
+    "source_path_from_root":  "/articles/azure-government/documentation-government-overview.md",
+    "redirect_url":  "/azure/azure-government/documentation-government-plan-security",
+    "redirect_document_id":  false
+},
 {
     "source_path_from_root":  "/articles/security/compliance/azure-services-in-fedramp-auditscope.md",
     "redirect_url":  "/azure/azure-government/compliance/azure-services-in-fedramp-auditscope",

articles/active-directory-b2c/whats-new-docs.md

@@ -15,6 +15,23 @@ manager: CelesteDG
 
 Welcome to what's new in Azure Active Directory B2C documentation. This article lists new docs that have been added and those that have had significant updates in the last three months. To learn what's new with the B2C service, see [What's new in Azure Active Directory](../active-directory/fundamentals/whats-new.md) and [Azure AD B2C developer release notes](custom-policy-developer-notes.md)
 
+## August 2022
+
+### New articles
+
+- [Configure Azure Active Directory B2C with Deduce to combat identity fraud and create a trusted user experience](partner-deduce.md)
+
+### Updated articles
+
+- [Clean up resources and delete the tenant](tutorial-delete-tenant.md)
+- [Set up sign-up and sign-in with a Twitter account using Azure Active Directory B2C](identity-provider-twitter.md)
+- [JSON claims transformations](json-transformations.md)
+- [Extensions app in Azure AD B2C](extensions-app.md)
+- [Manage Azure AD B2C with Microsoft Graph](microsoft-graph-operations.md)
+- [Define custom attributes in Azure Active Directory B2C](user-flow-custom-attributes.md)
+- [Azure Active Directory B2C: What's new](whats-new-docs.md)
+- [Page layout versions](page-layout.md)
+
 ## July 2022
 
 ### New articles
@@ -86,72 +103,4 @@ Welcome to what's new in Azure Active Directory B2C documentation. This article
 - [Application types that can be used in Active Directory B2C](application-types.md)
 - [Publish your Azure Active Directory B2C app to the Azure Active Directory app gallery](publish-app-to-azure-ad-app-gallery.md)
 - [Quickstart: Set up sign in for a desktop app using Azure Active Directory B2C](quickstart-native-app-desktop.md)
-- [Register a single-page application (SPA) in Azure Active Directory B2C](tutorial-register-spa.md)
-
-## March 2022
-
-### New articles
-
-- [Configure eID-Me with Azure Active Directory B2C for identity verification](partner-eid-me.md)
-- [Configure xID with Azure Active Directory B2C for passwordless authentication](partner-xid.md)
-- [Configure Transmit Security with Azure Active Directory B2C for passwordless authentication](partner-bindid.md)
-
-### Updated articles
-
-- [Configure eID-Me with Azure Active Directory B2C for identity verification](partner-eid-me.md)
-- [Language customization in Azure Active Directory B2C](language-customization.md)
-- [Configure Transmit Security with Azure Active Directory B2C for passwordless authentication](partner-bindid.md)
-- [Set up direct sign in using Azure Active Directory B2C](direct-signin.md)
-- [Single-page application sign in using the OAuth 2.0 implicit flow in Azure Active Directory B2C](implicit-flow-single-page-application.md)
-- [Azure AD B2C: Authentication protocols](protocols-overview.md)
-- [Configure Akamai with Azure Active Directory B2C](partner-akamai.md)
-- [Cookies definitions for Azure AD B2C](cookie-definitions.md)
-- [Manage Azure AD B2C with Microsoft Graph](microsoft-graph-operations.md)
-- [Azure Active Directory B2C: What's new](whats-new-docs.md)
-- [Define custom attributes in Azure Active Directory B2C](user-flow-custom-attributes.md)
-- [Options for registering a SAML application in Azure AD B2C](saml-service-provider-options.md)
-
-## February 2022
-
-### New articles
-
-- [Configure authentication in a sample Node.js web application by using Azure Active Directory B2C](configure-a-sample-node-web-app.md)
-- [Configure authentication in a sample Node.js web API by using Azure Active Directory B2C](configure-authentication-in-sample-node-web-app-with-api.md)
-- [Enable authentication options in a Node.js web app by using Azure Active Directory B2C](enable-authentication-in-node-web-app-options.md)
-- [Enable Node.js web API authentication options using Azure Active Directory B2C](enable-authentication-in-node-web-app-with-api-options.md)
-- [Enable authentication in your own Node.js web API by using Azure Active Directory B2C](enable-authentication-in-node-web-app-with-api.md)
-- [Enable authentication in your own Node web application using Azure Active Directory B2C](enable-authentication-in-node-web-app.md)
-
-### Updated articles
-
-- [Configure session behavior in Azure Active Directory B2C](session-behavior.md)
-- [Customize the user interface with HTML templates in Azure Active Directory B2C](customize-ui-with-html.md)
-- [Define a self-asserted technical profile in an Azure Active Directory B2C custom policy](self-asserted-technical-profile.md)
-- [About claim resolvers in Azure Active Directory B2C custom policies](claim-resolver-overview.md)
-- [Date claims transformations](date-transformations.md)
-- [Integer claims transformations](integer-transformations.md)
-- [JSON claims transformations](json-transformations.md)
-- [Define phone number claims transformations in Azure AD B2C](phone-number-claims-transformations.md)
-- [Social accounts claims transformations](social-transformations.md)
-- [String claims transformations](string-transformations.md)
-- [Web sign in with OpenID Connect in Azure Active Directory B2C](openid-connect.md)
-
-## January 2022
-
-### Updated articles
-
-- [Tutorial: Secure Hybrid Access to applications with Azure AD B2C and F5 BIG-IP](partner-f5.md)
-- [Set up a force password reset flow in Azure Active Directory B2C](force-password-reset.md)
-- [Boolean claims transformations](boolean-transformations.md)
-- [Date claims transformations](date-transformations.md)
-- [General claims transformations](general-transformations.md)
-- [Integer claims transformations](integer-transformations.md)
-- [JSON claims transformations](json-transformations.md)
-- [Define phone number claims transformations in Azure AD B2C](phone-number-claims-transformations.md)
-- [Social accounts claims transformations](social-transformations.md)
-- [String claims transformations](string-transformations.md)
-- [StringCollection claims transformations](stringcollection-transformations.md)
-- [Billing model for Azure Active Directory B2C](billing.md)
-- [Configure SAML identity provider options with Azure Active Directory B2C](identity-provider-generic-saml-options.md)
-- [About claim resolvers in Azure Active Directory B2C custom policies](claim-resolver-overview.md)
-- [Add AD FS as a SAML identity provider using custom policies in Azure Active Directory B2C](identity-provider-adfs-saml.md)
+- [Register a single-page application (SPA) in Azure Active Directory B2C](tutorial-register-spa.md)

articles/active-directory/authentication/how-to-migrate-mfa-server-to-azure-mfa-user-authentication.md

@@ -241,11 +241,8 @@ Microsoft Authenticator can be used as a passwordless sign-in method and a secon
 ### Register for combined security registration (recommended)
 
 We recommend having your users register for combined security information, which is a single place to register their authentication methods and devices for both MFA and SSPR. 
-While it's possible to migrate data from the MFA Server to Azure AD MFA, you face these challenges:
 
-* Only phone numbers can be migrated.
-* Authenticator apps will need to be reregistered.
-* Stale data can be migrated.
+Authentication data can be migrated from MFA Server to Azure AD. This process doesn't require any end-user interaction during or after the migration, but it can result in stale data being migrated.
 
 Microsoft provides communication templates that you can provide to your users to guide them through the combined registration process. 
 These include templates for email, posters, table tents, and various other assets. Users register their information at `https://aka.ms/mysecurityinfo`, which takes them to the combined security registration screen. 

articles/active-directory/develop/whats-new-docs.md

@@ -5,7 +5,7 @@ services: active-directory
 author: mmacy
 manager: CelesteDG
 
-ms.date: 08/01/2022
+ms.date: 09/01/2022
 ms.service: active-directory
 ms.subservice: develop
 ms.topic: reference
@@ -18,6 +18,23 @@ ms.custom: has-adal-ref
 
 Welcome to what's new in the Microsoft identity platform documentation. This article lists new docs that have been added and those that have had significant updates in the last three months.
 
+## August 2022
+
+### Updated articles
+
+- [Access Azure AD protected resources from an app in Google Cloud (preview)](workload-identity-federation-create-trust-gcp.md)
+- [Claims challenges, claims requests, and client capabilities](claims-challenge.md)
+- [Configure an app's publisher domain](howto-configure-publisher-domain.md)
+- [Configure an app to trust an external identity provider](workload-identity-federation-create-trust.md)
+- [How to use Continuous Access Evaluation enabled APIs in your applications](app-resilience-continuous-access-evaluation.md)
+- [Microsoft identity platform and OAuth 2.0 authorization code flow](v2-oauth2-auth-code-flow.md)
+- [Microsoft identity platform UserInfo endpoint](userinfo.md)
+- [OpenID Connect on the Microsoft identity platform](v2-protocols-oidc.md)
+- [Publisher verification](publisher-verification-overview.md)
+- [Protected web API: Code configuration](scenario-protected-web-api-app-configuration.md)
+- [Provide optional claims to your app](active-directory-optional-claims.md)
+- [Using directory extension attributes in claims](active-directory-schema-extensions.md)
+
 ## July 2022
 
 ### New articles
@@ -44,18 +61,3 @@ Welcome to what's new in the Microsoft identity platform documentation. This art
 - [Microsoft identity platform refresh tokens](refresh-tokens.md)
 - [Single-page application: Acquire a token to call an API](scenario-spa-acquire-token.md)
 - [Tutorial: Sign in users and call the Microsoft Graph API in an Electron desktop app](tutorial-v2-nodejs-desktop.md)
-
-## May 2022
-
-### Updated articles
-
-- [Developer guide to Conditional Access authentication context](developer-guide-conditional-access-authentication-context.md)
-- [Migrate confidential client applications from ADAL.NET to MSAL.NET](msal-net-migration-confidential-client.md)
-- [Protected web API: App registration](scenario-protected-web-api-app-registration.md)
-- [Quickstart: Sign in users and call the Microsoft Graph API from an Android app](mobile-app-quickstart-portal-android.md)
-- [Quickstart: Sign in users and call the Microsoft Graph API from an iOS or macOS app](mobile-app-quickstart-portal-ios.md)
-- [Set up your application's Azure AD test environment](test-setup-environment.md)
-- [Single sign-on SAML protocol](single-sign-on-saml-protocol.md)
-- [Single sign-on with MSAL.js](msal-js-sso.md)
-- [Tutorial: Sign in users and acquire a token for Microsoft Graph in a Node.js & Express web app](tutorial-v2-nodejs-webapp-msal.md)
-- [What's new for authentication?](reference-breaking-changes.md)

articles/active-directory/external-identities/add-users-administrator.md

@@ -7,12 +7,11 @@ services: active-directory
 ms.service: active-directory
 ms.subservice: B2B
 ms.topic: how-to
-ms.date: 09/10/2021
+ms.date: 08/31/2022
 
 ms.author: mimart
 author: msmimart
 manager: celestedg
-ms.reviewer: mal
 
 ms.collection: M365-identity-device-management
 ---
@@ -37,10 +36,10 @@ To add B2B collaboration users to the directory, follow these steps:
 1. Sign in to the [Azure portal](https://portal.azure.com) as a user who is assigned a limited administrator directory role or the Guest Inviter role.
 2. Search for and select **Azure Active Directory** from any page.
 3. Under **Manage**, select **Users**.
-4. Select **New guest user**.
+4. Select **New user** > **Invite external user**. (Or, if you're using the legacy experience, select **New guest user**).
 5. On the **New user** page, select **Invite user** and then add the guest user's information.
 
-   ![Guest user type image](media/add-users-administrator/invite-user.png)
+   ![Screenshot showing the new user page.](media/add-users-administrator/invite-user.png)
 
       - **Name.** The first and last name of the guest user.
    - **Email address (required)**. The email address of the guest user.
@@ -54,7 +53,7 @@ To add B2B collaboration users to the directory, follow these steps:
 
 After you send the invitation, the user account is automatically added to the directory as a guest.
 
- ![Guest user image](media/add-users-administrator//guest-user-type.png)
+ ![Screenshot showing the user list including the new Guest user.](media/add-users-administrator//guest-user-type.png)
 
 ## Add guest users to a group
 If you need to manually add B2B collaboration users to a group, follow these steps:
@@ -131,16 +130,15 @@ If a guest user has not yet redeemed their invitation, you can resend the invita
 1. Sign in to the [Azure portal](https://portal.azure.com) as an Azure AD administrator.
 2. Search for and select **Azure Active Directory** from any page.
 3. Under **Manage**, select **Users**.
-4. Select the user account.
-5. In the **Identity** section, under **Invitation accepted**, Select the **(manage)** link. 
+4. In the list, select the user's name to open their user profile.
+5. Under **My Feed**, in the **B2B collaboration** tile, select the **Manage (resend invitation / reset status** link.
 6. If the user has not yet accepted the invitation, Select the **Yes** option to resend.
 
-    ![Resend Invitation](./media/add-users-administrator/resend-invitation.png)
+    ![Screenshot showing the Resend Invite radio button.](./media/add-users-administrator/resend-invitation.png)
 
-> [!NOTE]
-> An invitation URL will be generated.
+7. In the confirmation message, select **Yes** to confirm that you want to send the user a new email invitation for redeeming their guest account. An invitation URL will be generated and sent to the user.
 
 ## Next steps
 
-- To learn how non-Azure AD admins can add B2B guest users, see [How do information workers add B2B collaboration users?](add-users-information-worker.md)
+- To learn how non-Azure AD admins can add B2B guest users, see [How users in your organization can invite guest users to an app](add-users-information-worker.md)
 - For information about the invitation email, see [The elements of the B2B collaboration invitation email](invitation-email-elements.md).