updating images

Author: VanMSFT

articles/sql-database/media/sql-database-aad-authentication/12connect-using-pw-auth2.png

@@ -458,7 +458,7 @@ Use this method if you are logged into Windows using your Azure Active Directory
 
     ![Select AD Integrated Authentication][11]
 
-2. Select the **Options** button, and on the **Connection Properties** page, in the **Connect to database** box, type the name of the user database you want to connect to. (The **AD domain name or tenant ID**" option is only supported for **Universal with MFA connection** options, otherwise it is greyed out.)  
+2. Select the **Options** button, and on the **Connection Properties** page, in the **Connect to database** box, type the name of the user database you want to connect to. For more information, see the article [Multi-factor AAD auth](sql-database-ssms-mfa-authentication.md#azure-ad-domain-name-or-tenant-id-parameter) on the differences between the Connection Properties for SSMS 17.x and 18.x. 
 
     ![Select the database name][13]
 
@@ -522,7 +522,7 @@ Learn more about Azure AD authentication methods using the demo code samples ava
 
 ## Azure AD token
 
-This authentication method allows middle-tier services to connect to Azure SQL Database or Azure Synapse by obtaining a token from Azure Active Directory (AAD). It enables sophisticated scenarios including certificate-based authentication. You must complete four basic steps to use Azure AD token authentication:
+This authentication method allows middle-tier services to obtain [JSON Web Tokens (JWT)](../active-directory/develop/id-tokens.md) to connect to Azure SQL Database or Azure Synapse by obtaining a token from Azure Active Directory (AAD). This method enables various application scenarios including service identities, service principals, and applications using certificate-based authentication. You must complete four basic steps to use Azure AD token authentication:
 
 1. Register your application with Azure Active Directory and get the client ID for your code.
 2. Create a database user representing the application. (Completed earlier in step 6.)

articles/sql-database/media/sql-database-aad-authentication/13connect-to-db2.png

@@ -133,7 +133,7 @@ Azure Active Directory authentication supports the following methods of connecti
 - Azure Active Directory Universal with MFA
 - Using Application token authentication
 
-The following authentication methods are supported for Azure AD server principals (logins) (**public preview**):
+The following authentication methods are supported for Azure AD server principals (logins):
 
 - Azure Active Directory Password
 - Azure Active Directory Integrated
@@ -144,7 +144,7 @@ The following authentication methods are supported for Azure AD server principal
 
 - To enhance manageability, we recommend you provision a dedicated Azure AD group as an administrator.   
 - Only one Azure AD administrator (a user or group) can be configured for an Azure SQL Database server or Azure Synapse at any time.
-  - The addition of Azure AD server principals (logins) for managed instances (**public preview**) allows the possibility of creating multiple Azure AD server principals (logins) that can be added to the `sysadmin` role.
+  - The addition of Azure AD server principals (logins) for managed instances allows the possibility of creating multiple Azure AD server principals (logins) that can be added to the `sysadmin` role.
 - Only an Azure AD administrator for SQL Server can initially connect to the Azure SQL Database server, managed instance, or Azure Synapse using an Azure Active Directory account. The Active Directory administrator can configure subsequent Azure AD database users.   
 - We recommend setting the connection timeout to 30 seconds.   
 - SQL Server 2016 Management Studio and SQL Server Data Tools for Visual Studio 2015 (version 14.0.60311.1April 2016 or later) support Azure Active Directory authentication. (Azure AD authentication is supported by the **.NET Framework Data Provider for SqlServer**; at least version .NET Framework 4.6). Therefore the newest versions of these tools and data-tier applications (DAC and .BACPAC) can use Azure AD authentication.