Merge pull request #89177 from MicrosoftDocs/master

9/19 PM Publish

Author: huypub

.openpublishing.redirection.json

@@ -1,5 +1,10 @@
 {
   "redirections": [
+    {
+      "source_path": "articles/php-download-sdk.md",
+      "redirect_url": "https://github.com/Azure/azure-sdk-for-php",
+      "redirect_document_id": false
+    },
     {
       "source_path": "articles/azure-government/documentation-government-get-started-connect-with-vs.md",
       "redirect_url": "/azure/azure-government/documentation-government-welcome",

articles/active-directory/authentication/howto-registration-mfa-sspr-combined.md

@@ -27,7 +27,7 @@ Before enabling the new experience, review the article [Combined security inform
 |     |
 
 > [!NOTE]
-> Organizations who enabled the previous preview for registering and managing security info should complete the steps below to enable the enhanced preview experience. For organizations who do not make the switch, on September 25, 2019, Microsoft will switch users of the previous preview for registering and managing security info to the enhanced experience. 
+> Organizations who enabled the previous preview for registering and managing security info should complete the steps below to enable the enhanced preview experience. For organizations who do not make the switch, on October 8, 2019, Microsoft will switch users of the previous preview for registering and managing security info to the enhanced experience. 
 > 
 > If you have not enabled any version of the preview your organization will not be impacted.
 

articles/active-directory/develop/identity-platform-integration-checklist.md

@@ -75,6 +75,7 @@ Use the following checklist to ensure that your application is effectively integ
 | ![checkbox](./media/active-directory-integration-checklist/checkbox-two.svg) |  For mobile apps, configure each platform using the application registration experience. In order for your application to take advantage of the Microsoft Authenticator or Microsoft Company Portal for single sign-in, your app needs a “broker redirect URI” configured. This allows Microsoft to return control to your application after authentication. When configuring each platform, the app registration experience will guide you through the process. Use the quickstart to download a working example. On iOS, use brokers and system webview whenever possible.|
 | ![checkbox](./media/active-directory-integration-checklist/checkbox-two.svg) |  In web apps or web APIs, keep one token cache per account.  For web apps, the token cache should be keyed by the account ID.  For web APIs, the account should be keyed by the hash of the token used to call the API. MSAL.NET provides custom token cache serialization in the .NET Framework and .NET Core subplatforms. For security and performance reasons, our recommendation is to serialize one cache per user. For more information, read about [token cache serialization](msal-net-token-cache-serialization.md#token-cache-for-a-web-app-confidential-client-application).|
 | ![checkbox](./media/active-directory-integration-checklist/checkbox-two.svg) | If the data your app requires is available through [Microsoft Graph](https://developer.microsoft.com/graph), request permissions for this data using the Microsoft Graph endpoint rather than the individual API. |
+| ![checkbox](./media/active-directory-integration-checklist/checkbox-two.svg) |Don't look at the access token value, or attempt to parse it as a client.  They can change values, formats, or even become encrypted without warning - always use the id_token if your client needs to learn something about the user, or call Microsoft Graph.  Only web APIs should parse access tokens (since they are the ones defining the format and setting the encryption keys). |
 
 ## End-user experience
 

articles/active-directory/users-groups-roles/TOC.yml

@@ -36,27 +36,25 @@
   items:
   - name: Manage users
     items: 
-    - name: Add new users to Azure AD 
+    - name: Create users 
       href: /azure/active-directory/fundamentals/add-users-azure-active-directory?context=azure/active-directory/users-groups-roles/context/ugr-context
-    - name: Manage user profiles    
+    - name: Bulk create users (preview)
+      href: users-bulk-add.md    
+    - name: Manage user profiles
       href: /azure/active-directory/fundamentals/active-directory-users-profile-azure-portal?context=azure/active-directory/users-groups-roles/context/ugr-context
-    - name: Bulk operations (preview)
-      items:
-        - name: Download users (preview)
-          href: users-bulk-download.md
-        - name: Bulk import users (preview)
-          href: users-bulk-add.md
-        - name: Bulk delete users (preview)
-          href: users-bulk-delete.md
-        - name: Bulk restore users (preview)
-          href: users-bulk-restore.md
+    - name: Download user info (preview)
+      href: users-bulk-download.md
     - name: Share user accounts  
       href: users-sharing-accounts.md
     - name: Assign users to admin roles    
       href: /azure/active-directory/fundamentals/active-directory-users-assign-role-azure-portal?context=azure/active-directory/users-groups-roles/context/ugr-context
+    - name: Bulk delete users (preview)
+      href: users-bulk-delete.md
     - name: Restore a deleted user    
       href: /azure/active-directory/fundamentals/active-directory-users-restore?context=azure/active-directory/users-groups-roles/context/ugr-context
-    - name: Close your account in an unmanaged directory
+    - name: Bulk restore users (preview)
+      href: users-bulk-restore.md
+    - name: Close an account in an unmanaged directory
       href: users-close-account.md
     - name: Add B2B users  
       href: /azure/active-directory/b2b/what-is-b2b?context=azure/active-directory/users-groups-roles/context/ugr-context
@@ -86,28 +84,26 @@
       href: /azure/active-directory/fundamentals/active-directory-manage-groups?context=azure/active-directory/users-groups-roles/context/ugr-context
     - name: Search group and member lists (preview)    
       href: groups-members-owners-search.md
+    - name: Create a group (Azure portal)    
+      href: /azure/active-directory/fundamentals/active-directory-groups-create-azure-portal?context=azure/active-directory/users-groups-roles/context/ugr-context
     - name: Manage groups PowerShell for Graph (v2)   
       href: groups-settings-v2-cmdlets.md
     - name: Manage groups PowerShell MSOnline    
       href: groups-settings-cmdlets.md
-    - name: Manage group members    
+    - name: Add or remove group members    
       href: /azure/active-directory/fundamentals/active-directory-groups-members-azure-portal?context=azure/active-directory/users-groups-roles/context/ugr-context
+    - name: Bulk add members (preview)
+      href: groups-bulk-import-members.md
+    - name: Bulk remove members (preview)
+      href: groups-bulk-remove-members.md
+    - name: Bulk download member list (preview)
+      href: groups-bulk-download-members.md
     - name: Manage group owners
       href: /azure/active-directory/fundamentals/active-directory-accessmanagement-managing-group-owners?context=azure/active-directory/users-groups-roles/context/ugr-context
-    - name: Bulk operations (preview)
-      items:
-      - name: Bulk import members (preview)
-        href: groups-bulk-import-members.md
-      - name: Bulk download members (preview)
-        href: groups-bulk-download-members.md
-      - name: Bulk remove members (preview)
-        href: groups-bulk-remove-members.md
-      - name: Bulk download a groups list (preview)
-        href: groups-bulk-download.md
+    - name: Bulk download groups list (preview)
+      href: groups-bulk-download.md
     - name: Manage groups in groups
       href: /azure/active-directory/fundamentals/active-directory-groups-membership-azure-portal?context=azure/active-directory/users-groups-roles/context/ugr-context
-    - name: Create a group (Azure portal)    
-      href: /azure/active-directory/fundamentals/active-directory-groups-create-azure-portal?context=azure/active-directory/users-groups-roles/context/ugr-context
     - name: Add group access to SaaS apps
       href: groups-saasapps.md
     - name: Groups naming reference

articles/active-directory/users-groups-roles/domains-admin-takeover.md

@@ -84,14 +84,11 @@ When you verify ownership of the domain name, Azure AD removes the domain name f
 ### Support for external admin takeover
 External admin takeover is supported by the following online services:
 
-- Power BI
 - Azure Rights Management
 - Exchange Online
 
 The supported service plans include:
 
-- Power BI Free
-- Power BI Pro
 - PowerApps Free
 - PowerFlow Free
 - RMS for individuals
@@ -110,10 +107,6 @@ The key and templates are not moved over when the unmanaged tenant is in a diffe
 
 Although RMS for individuals is designed to support Azure AD authentication to open protected content, it doesn't prevent users from also protecting content. If users did protect content with the RMS for individuals subscription, and the key and templates were not moved over, that content is not accessible after the domain takeover.
 
-#### More information about Power BI
-
-When you perform an external takeover, Power BI content that was created before the takeover is placed in a [Power BI Archived Workspace](/power-bi/service-admin-power-bi-archived-workspace). You must manually migrate any content that you want to use in the new tenant.
-
 ### Azure AD PowerShell cmdlets for the ForceTakeover option
 You can see these cmdlets used in [PowerShell example](#powershell-example).
 

articles/active-directory/users-groups-roles/groups-bulk-download-members.md

@@ -22,10 +22,6 @@ Using Azure Active Directory (Azure AD) portal, you can bulk download the member
 > [!NOTE]
 > Azure AD bulk operations are a public preview feature of Azure AD and are available with any paid Azure AD license plan. For more information about preview use terms, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
 
-## Bulk download service limits
-
-Each bulk activity to download a list of group members can run for up to one hour. This enables you to download of a list of at least 500,000 members.
-
 ## To bulk download group membership
 
 1. Sign in to [the Azure portal](https://portal.azure.com) with a User administrator account in the organization. Group owners can also bulk download members of groups they own.
@@ -41,6 +37,10 @@ You can see the status of all of your pending bulk requests in the **Bulk operat
 
    ![The Bulk operations results page shows you bulk request status](./media/groups-bulk-download-members/bulk-center.png)
 
+## Bulk download service limits
+
+Each bulk activity to download a list of group members can run for up to one hour. This enables you to download a list of at least 500,000 members.
+
 ## Next steps
 
 - [Bulk import group members](groups-bulk-import-members.md)

articles/active-directory/users-groups-roles/groups-bulk-download.md

@@ -23,10 +23,6 @@ Using Azure Active Directory (Azure AD) portal, you can bulk download the list o
 > [!NOTE]
 > Azure AD bulk operations are a public preview feature of Azure AD and are available with any paid Azure AD license plan. For more information about preview use terms, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
 
-## Bulk download service limits
-
-Each bulk activity to download a group list can run for up to one hour. This enables you to download a list of at least 300,000 groups.
-
 ## To download a list of groups
 
 1. Sign in to [the Azure portal](https://portal.azure.com) with an administrator account in the organization.
@@ -41,6 +37,10 @@ You can see the status of all of your pending bulk requests in the **Bulk operat
 
    ![The Bulk operations results page shows you bulk request status](./media/groups-bulk-download/bulk-center.png)
 
+## Bulk download service limits
+
+Each bulk activity to download a group list can run for up to one hour. This enables you to download a list of at least 300,000 groups.
+
 ## Next steps
 
 - [Bulk remove group members](groups-bulk-remove-members.md)

articles/active-directory/users-groups-roles/groups-bulk-import-members.md

@@ -22,26 +22,39 @@ Using Azure Active Directory (Azure AD) portal, you can add a large number of me
 > [!NOTE]
 > Azure AD bulk operations are a public preview feature of Azure AD and are available with any paid Azure AD license plan. For more information about preview use terms, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
 
-## Bulk import service limits
-
-Each bulk activity to import a list of group members can run for up to one hour. This enables importation of a list of at least 40,000 members.
-
 ## To bulk import group members
 
 1. Sign in to [the Azure portal](https://portal.azure.com) with a User administrator account in the organization. Group owners can also bulk import members of groups they own.
 1. In Azure AD, select **Groups** > **All groups**.
 1. Open the group to which you're adding members and then select **Members**.
-1. On the **Members** page, select **Import members** to download, update, and upload a CSV file listing the members that you want to import into the group.
+1. On the **Members** page, select **Import members**.
+1. On the **Bulk import group members (Preview)** page, select **Download** to get the CSV file template with required group member properties.
+
+    ![The Import Members command is on the profile page for the group](./media/groups-bulk-import-members/import-panel.png)
+
+1. Open the CSV file and add a line for each group member you want to import into the group (required values are either **Member object ID** or **User principal name**). Then save the file.
 
-   ![The Import Members command is on the profile page for the group](./media/groups-bulk-import-members/import-panel.png)
+   ![The CSV file contains names and IDs for the members to import](./media/groups-bulk-import-members/csv-file.png)
+
+1. On the **Bulk import group members (Preview)** page, under **Upload your csv file**, browse to the file. When you select the file, validation of the CSV file starts.
+1. When the file contents are validated, the bulk import page displays **File uploaded successfully**. If there are errors, you must fix them before you can submit the job.
+1. When your file passes validation, select **Submit** to start the Azure bulk operation that imports the group members to the group.
+1. When the import operation completes, you'll see a notification that the bulk operation succeeded.
 
 ## Check import status
 
 You can see the status of all of your pending bulk requests in the **Bulk operation results (preview)** page.
 
    ![The Bulk operations results page shows you bulk request status](./media/groups-bulk-import-members/bulk-center.png)
 
+For details about each line item within the bulk operation, select the values under the **# Success**, **# Failure**, or **Total Requests** columns. If failures occurred, the reasons for failure will be listed.
+
+## Bulk import service limits
+
+Each bulk activity to import a list of group members can run for up to one hour. This enables importation of a list of at least 40,000 members.
+
 ## Next steps
 
 - [Bulk remove group members](groups-bulk-remove-members.md)
 - [Download members of a group](groups-bulk-download-members.md)
+- [Download a list of all groups](groups-bulk-download.md)

articles/active-directory/users-groups-roles/groups-bulk-remove-members.md

@@ -22,26 +22,39 @@ Using Azure Active Directory (Azure AD) portal, you can remove a large number of
 > [!NOTE]
 > Azure AD bulk operations are a public preview feature of Azure AD and are available with any paid Azure AD license plan. For more information about preview use terms, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
 
-## Bulk removal service limits
-
-Each bulk activity to remove a list of group members from can run for up to one hour. This enables removal of a list of at least 40,000 members.
-
 ## To bulk remove group members
 
 1. Sign in to [the Azure portal](https://portal.azure.com) with a User administrator account in the organization. Group owners can also bulk remove members of groups they own.
 1. In Azure AD, select **Groups** > **All groups**.
 1. Open the group from which you're removing members and then select **Members**.
-1. On the **Members** page, select **Remove members** to download, update, and upload a CSV file listing the members that you want to remove from the group.
+1. On the **Members** page, select **Remove members**.
+1. On the **Bulk remove group members (Preview)** page, select **Download** to get the CSV file template with required group member properties.
 
    ![The Remove Members command is on the profile page for the group](./media/groups-bulk-remove-members/remove-panel.png)
 
+1. Open the CSV file and add a line for each group member you want to remove from the group (required values are Member object ID or User principal name). Then save the file.
+
+   ![The CSV file contains names and IDs for the members to remove](./media/groups-bulk-remove-members/csv-file.png)
+
+1. On the **Bulk remove group members (Preview)** page, under **Upload your csv file**, browse to the file. When you select the file, validation of the .csv file starts.
+1. When the file contents are validated, the bulk import page displays **File uploaded successfully**. If there are errors, you must fix them before you can submit the job.
+1. When your file passes validation, select **Submit** to start the Azure bulk operation that removes the group members from the group.
+1. When the removal operation completes, you'll see a notification that the bulk operation succeeded.
+
 ## Check removal status
 
 You can see the status of all of your pending bulk requests in the **Bulk operation results (preview)** page.
 
    ![The Bulk operations results page shows you bulk request status](./media/groups-bulk-remove-members/bulk-center.png)
 
+For details about each line item within the bulk operation, select the values under the **# Success**, **# Failure**, or **Total Requests** columns. If failures occurred, the reasons for failure will be listed.
+
+## Bulk removal service limits
+
+Each bulk activity to remove a list of group members from can run for up to one hour. This enables removal of a list of at least 40,000 members.
+
 ## Next steps
 
 - [Bulk import group members](groups-bulk-import-members.md)
 - [Download members of a group](groups-bulk-download-members.md)
+- [Download a list of all groups](groups-bulk-download.md)