Merge branch 'master' of https://github.com/MicrosoftDocs/azure-docs-pr into continuous-integration-deployment

Author: v-albemi

articles/active-directory/cloud-provisioning/what-is-cloud-provisioning.md

@@ -57,6 +57,7 @@ The following table provides a comparison between Azure AD Connect and Azure AD
 | Support for writeback (passwords, devices, groups) |● | |
 | Azure AD Domain Services support|● | |
 | Exchange hybrid configuration |● | |
+| Support for more than 50,000 objects per AD domain |● | |
 
 ## Next steps 
 

articles/active-directory/conditional-access/technical-reference.md

@@ -82,6 +82,10 @@ Key applications that are included in the Office 365 (preview) client app:
 - Microsoft Teams
 - Office 365 Yammer
 - Office portal
+- Microsoft Forms
+- Microsoft Power Automate
+- Microsoft Planner
+- Microsoft PowerApps
 
 ### Other applications
 

articles/active-directory/develop/quickstart-v2-javascript.md

@@ -88,7 +88,7 @@ var msalConfig = {
     auth: {
         clientId: "Enter_the_Application_Id_here",
         authority: "https://login.microsoftonline.com/Enter_the_Tenant_info_here",
-        redirectURI: "http://localhost:30662/"
+        redirectUri: "http://localhost:30662/"
     },
     cache: {
         cacheLocation: "localStorage",

articles/active-directory/hybrid/how-to-connect-install-prerequisites.md

@@ -75,7 +75,7 @@ To learn more, see:
 ### SQL Server used by Azure AD Connect
 * Azure AD Connect requires a SQL Server database to store identity data. By default a SQL Server 2012 Express LocalDB (a light version of SQL Server Express) is installed. SQL Server Express has a 10GB size limit that enables you to manage approximately 100,000 objects. If you need to manage a higher volume of directory objects, you need to point the installation wizard to a different installation of SQL Server. The type of SQL Server installation can impact the [performance of Azure AD Connect](https://docs.microsoft.com/azure/active-directory/hybrid/plan-connect-performance-factors#sql-database-factors).
 * If you use a different installation of SQL Server, then these requirements apply:
-  * Azure AD Connect supports all versions of Microsoft SQL Server from 2008 R2 (with latest Service Pack) to SQL Server 2019. Microsoft Azure SQL Database is **not supported** as a database.
+  * Azure AD Connect supports all versions of Microsoft SQL Server from 2012 (with latest Service Pack) to SQL Server 2019. Microsoft Azure SQL Database is **not supported** as a database.
   * You must use a case-insensitive SQL collation. These collations are identified with a \_CI_ in their name. It is **not supported** to use a case-sensitive collation, identified by \_CS_ in their name.
   * You can only have one sync engine per SQL instance. It is **not supported** to share a SQL instance with FIM/MIM Sync, DirSync, or Azure AD Sync.
 

articles/api-management/api-management-howto-api-inspector.md

@@ -44,10 +44,12 @@ In this tutorial, you learn how to:
 4. Select **GetSpeakers** operation.
 5. Make sure to include an HTTP header named **Ocp-Apim-Trace** with the value set to **true**.
 
-    > [!NOTE]
-    > If Ocp-Apim-Subscription-Key is not automatically populated, you can retrieve it by going to the Developer Portal and exposing the keys on the profile page.
+   > [!NOTE]
+   > * If Ocp-Apim-Subscription-Key is not automatically populated, you can retrieve it by going to the Developer Portal and exposing the keys on the profile page.
+   > * To get a trace when the Ocp-Apim-Trace HTTP header is used, the **Allow tracing** setting for the subscription key must be enabled. To configure the **Allow tracing** setting, under **API Management** in the left menu, select **Subscriptions**.
+   >   ![Allow tracing on the API Management Subscriptions pane](media/api-management-howto-api-inspector/allowtracing.png)
 
-6. Click **"Send"** to make an API call. 
+6. Click **Send** to make an API call. 
 7. Wait for the call to complete. 
 8. Go to the **Trace** tab in the **API console**. You can click any of the following links to jump to detailed trace info: **inbound**, **backend**, **outbound**.
 

articles/api-management/api-management-howto-deploy-self-hosted-gateway-to-docker.md

@@ -30,7 +30,7 @@ This article provides the steps for deploying self-hosted Azure API Management g
 - [Provision a gateway resource in your API Management instance](api-management-howto-provision-self-hosted-gateway.md)
 
 > [!NOTE]
-> Self-hosted gateway is packaged as a Linux-based Docker container.
+> Self-hosted gateway is packaged as a x86-64 Linux-based Docker container.
 
 ## Deploy the self-hosted gateway to Docker
 

articles/api-management/media/api-management-howto-api-inspector/allowtracing.png

@@ -37,6 +37,7 @@ ASEs are isolated to running only a single customer's applications and are alway
 * Multiple ASEs can be used to scale horizontally. For more information, see [how to set up a geo-distributed app footprint](app-service-app-service-environment-geo-distributed-scale.md).
 * ASEs can be used to configure security architecture, as shown in the AzureCon Deep Dive. To see how the security architecture shown in the AzureCon Deep Dive was configured, see the [article on how to implement a layered security architecture](app-service-app-service-environment-layered-security.md) with App Service environments.
 * Apps running on ASEs can have their access gated by upstream devices, such as web application firewalls (WAFs). For more information, see [Web application firewall (WAF)][AppGW].
+* App Service Environments can be deployed into Availability Zones (AZ) using zone pinning.  See [App Service Environment Support for Availability Zones][ASEAZ] for more details.
 
 ## Dedicated environment ##
 
@@ -98,3 +99,4 @@ ASEv1 uses a different pricing model from ASEv2. In ASEv1, you pay for each vCPU
 [Kudu]: https://azure.microsoft.com/resources/videos/super-secret-kudu-debug-console-for-azure-web-sites/
 [ASEWAF]: app-service-app-service-environment-web-application-firewall.md
 [AppGW]: ../../application-gateway/waf-overview.md
+[ASEAZ]: https://azure.github.io/AppService/2019/12/12/App-Service-Environment-Support-for-Availability-Zones.html

articles/app-service/environment/intro.md

@@ -93,6 +93,17 @@ Application Gateway supports the following cipher suites from which you can choo
 > [!NOTE]
 > SSL cipher suites used for the connection are also based on the type of the certificate being used. In client to application gateway connections, the cipher suites used are based on the type of server certificates on the application gateway listener. In application gateway to backend pool connections, the cipher suites used are based on the type of server certificates on the backend pool servers.
 
+## Known issue
+Application Gateway v2 does not currently support the following ciphers:
+- DHE-RSA-AES128-GCM-SHA256
+- DHE-RSA-AES128-SHA
+- DHE-RSA-AES256-GCM-SHA384
+- DHE-RSA-AES256-SHA
+- DHE-DSS-AES128-SHA256
+- DHE-DSS-AES128-SHA
+- DHE-DSS-AES256-SHA256
+- DHE-DSS-AES256-SHA
+
 ## Next steps
 
 If you want to learn to configure an SSL policy, see [Configure SSL policy on an application gateway](application-gateway-configure-ssl-policy-powershell.md).

articles/application-gateway/application-gateway-ssl-policy-overview.md

@@ -1,23 +1,23 @@
 ---
-title: Target Updates using SCCM Collections in Azure Automation - Update Management
-description: This article is intended to help you configure System Center Configuration Manager with this solution to manage updates of SCCM managed computers.
+title: Use Azure Update Management with Configuration Manager clients
+description: This article is intended to help you configure Microsoft Endpoint Configuration Manager with this solution to deploy software updates to ConfigMgr clients.
 services: automation
 ms.subservice: update-management
 ms.date: 03/19/2018
 ms.topic: conceptual
 ---
 
-# Integrate System Center Configuration Manager with Update Management
+# Deploy updates to Microsoft Endpoint Configuration Manager clients with Update Management
 
-Customers who have invested in System Center Configuration Manager to manage PCs, servers, and mobile devices also rely on its strength and maturity in managing software updates as part of their software update management (SUM) cycle.
+Customers who have invested in Microsoft Endpoint Configuration Manager to manage PCs, servers, and mobile devices also rely on its strength and maturity in managing software updates as part of their software update management (SUM) cycle.
 
-You can report and update managed Windows servers by creating and pre-staging software update deployments in Configuration Manager, and get detailed status of completed update deployments using the [Update Management solution](automation-update-management.md). If you use Configuration Manager for update compliance reporting but not for managing update deployments with your Windows servers, you can continue reporting to Configuration Manager  while security updates are managed with the Update Management solution.
+You can report and update managed Windows servers by creating and pre-staging software update deployments in Configuration Manager, and get detailed status of completed update deployments using the [Update Management solution](automation-update-management.md). If you use Configuration Manager for update compliance reporting but not for managing update deployments with your Windows servers, you can continue reporting to Configuration Manager while security updates are managed with the Update Management solution.
 
 ## Prerequisites
 
 * You must have the [Update Management solution](automation-update-management.md) added to your Automation account.
-* Windows servers currently managed by your System Center Configuration Manager environment also need to report to the Log Analytics workspace that also has the Update Management solution enabled.
-* This feature is enabled in System Center Configuration Manager current branch version 1606 and higher. To integrate your Configuration Manager central administration site or a stand-alone primary site with Azure Monitor logs and import collections, review [Connect Configuration Manager to Azure Monitor logs](../azure-monitor/platform/collect-sccm.md).  
+* Windows servers currently managed by your Configuration Manager environment also need to report to the Log Analytics workspace that also has the Update Management solution enabled.
+* This feature is enabled in Configuration Manager current branch version 1606 and higher. To integrate your Configuration Manager central administration site or a stand-alone primary site with Azure Monitor logs and import collections, review [Connect Configuration Manager to Azure Monitor logs](../azure-monitor/platform/collect-sccm.md).  
 * Windows agents must either be configured to communicate with a Windows Server Update Services (WSUS) server or have access to Microsoft Update if they don't receive security updates from Configuration Manager.   
 
 How you manage clients hosted in Azure IaaS with your existing Configuration Manager environment primarily depends on the connection you have between Azure datacenters and your infrastructure. This connection affects any design changes you may need to make to your Configuration Manager infrastructure and related cost to support those necessary changes. To understand what planning considerations you need to evaluate before proceeding, review [Configuration Manager on Azure - Frequently Asked Questions](/sccm/core/understand/configuration-manager-on-azure#networking).