Merge pull request #45903 from MicrosoftDocs/repo_sync_working_branch

Confirm merge from repo_sync_working_branch to master to sync with https://github.com/Microsoft/azure-docs (branch master)

Author: huypub

articles/active-directory/active-directory-conditional-access-migration-mfa.md

@@ -36,7 +36,7 @@ The scenario in this article shows how to migrate a classic policy that requires
 
 The migration process consist of the following steps:
 
-1. [Open the classic policy](#open-a-classic-policy) to get the the configuration settings.
+1. [Open the classic policy](#open-a-classic-policy) to get the configuration settings.
 2. Create a new Azure AD conditional access policy to replace your classic policy. 
 3. Disable the classic policy.
 

articles/active-directory/active-directory-reporting-azure-portal.md

@@ -109,7 +109,7 @@ If you want to know more about the various report types in Azure Active Director
 - [Audit logs report](active-directory-reporting-activity-audit-logs.md)
 - [Sign-ins logs report](active-directory-reporting-activity-sign-ins.md)
 
-If you want to know more about accessing the the reporting data using the reporting API, see: 
+If you want to know more about accessing the reporting data using the reporting API, see: 
 
 - [Getting started with the Azure Active Directory reporting API](active-directory-reporting-api-getting-started-azure-portal.md)
 

articles/active-directory/active-directory-saas-access-panel-introduction.md

@@ -103,6 +103,10 @@ To use internal company URLs while remote using the extension, do the following:
 3. Install the extension, and sign in to it by selecting Sign in to get started.
 4. You can now browse to the internal company URL even while remote.
 
+> [!NOTE]
+> You may also turn off automatic redirection to company URLs by selecting the settings gear on the main menu and selecting **off** for the Company internal URL redirection option.
+
+
 ## Mobile app support
 
 The Azure Active Directory team publishes the My Apps mobile app. When you install the app, you can sign in to password-based SSO applications on iOS and Android devices.

articles/active-directory/develop/active-directory-v2-protocols-implicit.md

@@ -47,7 +47,7 @@ The entire implicit sign-in flow looks something like this - each of the steps a
 To initially sign the user into your app, you can send an [OpenID Connect](active-directory-v2-protocols-oidc.md) authorization request and get an `id_token` from the v2.0 endpoint:
 
 > [!IMPORTANT]
-> In order to succesfully request an ID token, the app registration in the [registration portal](https://apps.dev.microsoft.com) must have the **[Implicit grant](active-directory-v2-protocols-implicit.md)** enabled for the the Web client. If it is not enabled, an `unsupported_response` error will be returned: "The provided value for the input parameter 'response_type' is not allowed for this client. Expected value is 'code'"
+> In order to succesfully request an ID token, the app registration in the [registration portal](https://apps.dev.microsoft.com) must have the **[Implicit grant](active-directory-v2-protocols-implicit.md)** enabled for the Web client. If it is not enabled, an `unsupported_response` error will be returned: "The provided value for the input parameter 'response_type' is not allowed for this client. Expected value is 'code'"
 
 ```
 // Line breaks for legibility only

articles/active-directory/develop/active-directory-v2-protocols-oidc.md

@@ -81,7 +81,7 @@ When your web app needs to authenticate the user, it can direct the user to the
 * The request must include the `nonce` parameter.
 
 > [!IMPORTANT]
-> In order to succesfully request an ID token, the app registration in the [registration portal](https://apps.dev.microsoft.com) must have the **[Implicit grant](active-directory-v2-protocols-implicit.md)** enabled for the the Web client. If it is not enabled, an `unsupported_response` error will be returned: "The provided value for the input parameter 'response_type' is not allowed for this client. Expected value is 'code'"
+> In order to succesfully request an ID token, the app registration in the [registration portal](https://apps.dev.microsoft.com) must have the **[Implicit grant](active-directory-v2-protocols-implicit.md)** enabled for the Web client. If it is not enabled, an `unsupported_response` error will be returned: "The provided value for the input parameter 'response_type' is not allowed for this client. Expected value is 'code'"
 
 For example:
 

articles/active-directory/device-management-hybrid-azuread-joined-devices-setup.md

@@ -266,7 +266,7 @@ The definition helps you to verify whether the values are present or if you need
 
 ### Issue objectSID of the computer account on-premises
 
-**`http://schemas.microsoft.com/ws/2008/06/identity/claims/primarysid`** - This claim must contain the the **objectSid** value of the on-premises computer account. In AD FS, you can add an issuance transform rule that looks like this:
+**`http://schemas.microsoft.com/ws/2008/06/identity/claims/primarysid`** - This claim must contain the **objectSid** value of the on-premises computer account. In AD FS, you can add an issuance transform rule that looks like this:
 
     @RuleName = "Issue objectSID for domain-joined computers"
     c1:[

articles/active-directory/saas-apps/ciscocloudlock-tutorial.md

@@ -163,7 +163,7 @@ The objective of this section is to create a test user in the Azure portal calle
 
 ### Create a The Cloud Security Fabric test user
 
-In this section, you create a user called Britta Simon in The Cloud Security Fabric. Work with [The Cloud Security Fabric support team](mailto:[email protected]) to add the users in the The Cloud Security Fabric platform. Users must be created and activated before you use single sign-on. 
+In this section, you create a user called Britta Simon in The Cloud Security Fabric. Work with [The Cloud Security Fabric support team](mailto:[email protected]) to add the users in The Cloud Security Fabric platform. Users must be created and activated before you use single sign-on. 
 
 ### Assign the Azure AD test user
 
@@ -179,7 +179,7 @@ In this section, you enable Britta Simon to use Azure single sign-on by granting
 
 2. In the applications list, select **The Cloud Security Fabric**.
 
-	![The The Cloud Security Fabric link in the Applications list](./media/ciscocloudlock-tutorial/tutorial_ciscocloudlock_app.png)  
+	![The Cloud Security Fabric link in the Applications list](./media/ciscocloudlock-tutorial/tutorial_ciscocloudlock_app.png)  
 
 3. In the menu on the left, click **Users and groups**.
 
@@ -199,7 +199,7 @@ In this section, you enable Britta Simon to use Azure single sign-on by granting
 
 In this section, you test your Azure AD single sign-on configuration using the Access Panel.
 
-When you click the The Cloud Security Fabric tile in the Access Panel, you should get automatically signed-on to your The Cloud Security Fabric application.
+When you click The Cloud Security Fabric tile in the Access Panel, you should get automatically signed-on to your The Cloud Security Fabric application.
 For more information about the Access Panel, see [Introduction to the Access Panel](../active-directory-saas-access-panel-introduction.md).
 
 ## Additional resources

articles/active-directory/saas-apps/dropboxforbusiness-tutorial.md

@@ -155,7 +155,7 @@ In this section, you enable Azure AD single sign-on in the Azure portal and conf
 
     a. Click **Required**.
 
-    b. In the the **Sign-in URL** textbox, paste the value of **SAML Single Sign-On Service URL** which you have copied from the Azure portal.
+    b. In the **Sign-in URL** textbox, paste the value of **SAML Single Sign-On Service URL** which you have copied from the Azure portal.
 
     c. Click **Choose certificate**, and then browse to your **Base64 encoded certificate file**.
 

articles/active-directory/saas-apps/intralinks-tutorial.md

@@ -235,7 +235,7 @@ After that you can follow the below procedure to add another Intralinks applicat
 
 	![Configure Single Sign-On](./media/intralinks-tutorial/tutorial_intralinks_linkedsignon.png)
 
-8. Get the the SP Initiated SSO URL from [Intralinks team](https://www.intralinks.com/contact-1) for the other Intralinks application and enter it in **Configure Sign-on URL** as shown below. 
+8. Get the SP Initiated SSO URL from [Intralinks team](https://www.intralinks.com/contact-1) for the other Intralinks application and enter it in **Configure Sign-on URL** as shown below. 
 
      ![Configure Single Sign-On](./media/intralinks-tutorial/tutorial_intralinks_customappurl.png)
 

articles/active-directory/saas-apps/jostle-tutorial.md

@@ -45,7 +45,7 @@ To test the steps in this tutorial, you should follow these recommendations:
 - If you don't have an Azure AD trial environment, you can get a one-month trial [here](https://azure.microsoft.com/pricing/free-trial/).
 
 ## Scenario description
-In this tutorial, you test Azure AD single sign-on in a test environment. 
+In this tutorial, you test Azure AD single sign-on in a test environment.
 The scenario outlined in this tutorial consists of two main building blocks:
 
 1. Adding Jostle from the gallery
@@ -56,21 +56,21 @@ To configure the integration of Jostle into Azure AD, you need to add Jostle fro
 
 **To add Jostle from the gallery, perform the following steps:**
 
-1. In the **[Azure portal](https://portal.azure.com)**, on the left navigation panel, click **Azure Active Directory** icon. 
+1. In the **[Azure portal](https://portal.azure.com)**, on the left navigation panel, click **Azure Active Directory** icon.
 
 	![Active Directory][1]
 
 2. Navigate to **Enterprise applications**. Then go to **All applications**.
 
 	![Applications][2]
-	
-3. To add new application, click **New application** button on the top of dialog.
 
-	![Applications][3]
+3. Click **Add** at the top of the window.
 
-4. In the search box, type **Jostle**.
+	![add_01](./media/jostle-tutorial/add_01.png)
 
-	![Creating an Azure AD test user](./media/jostle-tutorial/tutorial_jostle_search.png)
+4. In the search box under **Add an application** type **Jostle**.
+
+	![add_02](./media/jostle-tutorial/add_02.png)
 
 5. In the results panel, select **Jostle**, and then click **Add** button to add the application.
 
@@ -102,35 +102,36 @@ In this section, you enable Azure AD single sign-on in the Azure portal and conf
 	![Configure Single Sign-On][4]
 
 2. On the **Single sign-on** dialog, select **Mode** as	**SAML-based Sign-on** to enable single sign-on.
- 
+
 	![Configure Single Sign-On](./media/jostle-tutorial/tutorial_jostle_samlbase.png)
 
 3. On the **Jostle Domain and URLs** section, perform the following steps:
 
-	![Configure Single Sign-On](./media/jostle-tutorial/tutorial_jostle_url.png)
+	![url_01](./media/jostle-tutorial/url_01.png)
+
+  	a. In the **Sign-on URL** textbox, enter: `https://login-prod.jostle.us`
 
-    a. In the **Sign-on URL** textbox, type a URL using the following pattern: `https://<tanent name>.jostle.us/jostle-prod/`
+	b. In the **Identifier** textbox, enter: `https://jostle.us`
 
-	b. In the **Identifier** textbox, type a URL using the following pattern: `https://<tanent name>.jostle.us`
+  	c. Check the box next to **Show advanced URL settings**
 
-	> [!NOTE] 
-	> These values are not real. Update these values with the actual Sign-On URL and Identifier. Contact [Jostle support team](mailto:[email protected]) to get these values. 
- 
+	d. In the **Reply URL** textbox, enter: `https://login-prod.jostle.us/saml/SSO/alias/newjostle.us`
 
+4. On the **User Attributes** section, for the **User Identifier** field, enter: `user.userprincipalname`
 
-4. On the **SAML Signing Certificate** section, click **Metadata XML** and then save the metadata file on your computer.
+	![url_02](./media/jostle-tutorial/url_02.png)
 
-	![Configure Single Sign-On](./media/jostle-tutorial/tutorial_jostle_certificate.png) 
+5. Click **Save** at the top of the window.
 
-5. Click **Save** button.
+6. Go to **SAML Signing Certificate** and verify that it's set to **Active**. Then click **Metadata XML** to download the metadata file.
 
-	![Configure Single Sign-On](./media/jostle-tutorial/tutorial_general_400.png)
+	![url_03](./media/jostle-tutorial/url_03.png)
 
-7. To configure single sign-on on Jostle side, you need to send the downloaded metadata XML to [Jostle support team](mailto:[email protected]). They set this setting to have the SAML SSO connection set properly on both sides. 
+7. To configure single sign-on on Jostle's side, you need to send the downloaded metadata XML to [Jostle support team](mailto:[email protected]). They set this setting to have the SAML SSO connection set properly on both sides.
 
 > [!TIP]
 > You can now read a concise version of these instructions inside the [Azure portal](https://portal.azure.com), while you are setting up the app!  After adding this app from the **Active Directory > Enterprise Applications** section, simply click the **Single Sign-On** tab and access the embedded documentation through the **Configuration** section at the bottom. You can read more about the embedded documentation feature here: [Azure AD embedded documentation]( https://go.microsoft.com/fwlink/?linkid=845985)
-> 
+>
 
 ### Creating an Azure AD test user
 The objective of this section is to create a test user in the Azure portal called Britta Simon.
@@ -141,19 +142,19 @@ The objective of this section is to create a test user in the Azure portal calle
 
 1. In the **Azure portal**, on the left navigation pane, click **Azure Active Directory** icon.
 
-	![Creating an Azure AD test user](./media/jostle-tutorial/create_aaduser_01.png) 
+	![Creating an Azure AD test user](./media/jostle-tutorial/create_aaduser_01.png)
 
 2. To display the list of users, go to **Users and groups** and click **All users**.
-	
-	![Creating an Azure AD test user](./media/jostle-tutorial/create_aaduser_02.png) 
+
+	![Creating an Azure AD test user](./media/jostle-tutorial/create_aaduser_02.png)
 
 3. To open the **User** dialog, click **Add** on the top of the dialog.
- 
-	![Creating an Azure AD test user](./media/jostle-tutorial/create_aaduser_03.png) 
+
+	![Creating an Azure AD test user](./media/jostle-tutorial/create_aaduser_03.png)
 
 4. On the **User** dialog page, perform the following steps:
- 
-	![Creating an Azure AD test user](./media/jostle-tutorial/create_aaduser_04.png) 
+
+	![Creating an Azure AD test user](./media/jostle-tutorial/create_aaduser_04.png)
 
     a. In the **Name** textbox, type **BrittaSimon**.
 
@@ -162,7 +163,7 @@ The objective of this section is to create a test user in the Azure portal calle
 	c. Select **Show Password** and write down the value of the **Password**.
 
     d. Click **Create**.
- 
+
 ### Creating a Jostle test user
 
 In this section, you create a user called Britta Simon in Jostle. If you don't know how to add Britta Simon in Jostle, please contact with [Jostle support team](mailto:[email protected]) to add the test user and enable SSO.
@@ -174,21 +175,21 @@ In this section, you create a user called Britta Simon in Jostle. If you don't k
 
 In this section, you enable Britta Simon to use Azure single sign-on by granting access to Jostle.
 
-![Assign User][200] 
+![Assign User][200]
 
 **To assign Britta Simon to Jostle, perform the following steps:**
 
 1. In the Azure portal, open the applications view, and then navigate to the directory view and go to **Enterprise applications** then click **All applications**.
 
-	![Assign User][201] 
+	![Assign User][201]
 
 2. In the applications list, select **Jostle**.
 
-	![Configure Single Sign-On](./media/jostle-tutorial/tutorial_jostle_app.png) 
+	![Configure Single Sign-On](./media/jostle-tutorial/tutorial_jostle_app.png)
 
 3. In the menu on the left, click **Users and groups**.
 
-	![Assign User][202] 
+	![Assign User][202]
 
 4. Click **Add** button. Then select **Users and groups** on **Add Assignment** dialog.
 
@@ -199,7 +200,7 @@ In this section, you enable Britta Simon to use Azure single sign-on by granting
 6. Click **Select** button on **Users and groups** dialog.
 
 7. Click **Assign** button on **Add Assignment** dialog.
-	
+
 ### Testing single sign-on
 
 In this section, you test your Azure AD single sign-on configuration using the Access Panel.
@@ -227,4 +228,3 @@ For more information about the Access Panel, see [Introduction to the Access Pan
 [201]: ./media/jostle-tutorial/tutorial_general_201.png
 [202]: ./media/jostle-tutorial/tutorial_general_202.png
 [203]: ./media/jostle-tutorial/tutorial_general_203.png
-