Merge pull request #99807 from MicrosoftDocs/master

12/27 PM Publish

Author: huypub

articles/active-directory/develop/active-directory-claims-mapping.md

@@ -411,7 +411,13 @@ Based on the method chosen, a set of inputs and outputs is expected. Define the
 
 ### Custom signing key
 
-A custom signing key must be assigned to the service principal object for a claims mapping policy to take effect. This ensures acknowledgment that tokens have been modified by the creator of the claims mapping policy and protects applications from claims mapping policies created by malicious actors.  Apps that have claims mapping enabled must check a special URI for their token signing keys by appending `appid={client_id}` to their [OpenID Connect metadata requests](v2-protocols-oidc.md#fetch-the-openid-connect-metadata-document).  
+A custom signing key must be assigned to the service principal object for a claims mapping policy to take effect. This ensures acknowledgment that tokens have been modified by the creator of the claims mapping policy and protects applications from claims mapping policies created by malicious actors. In order to add a custom signing key, you can use the Azure Powershell cmdlet `new-azureadapplicationkeycredential` to create a symmetric key credential for your Application object. For more information on this Azure Powershell cmdlet click [here](https://docs.microsoft.com/powershell/module/Azuread/New-AzureADApplicationKeyCredential?view=azureadps-2.0).
+
+Apps that have claims mapping enabled must validate their token signing keys by appending `appid={client_id}` to their [OpenID Connect metadata requests](v2-protocols-oidc.md#fetch-the-openid-connect-metadata-document). Below is the format of the OpenID Connect metadata document you should use: 
+
+```
+https://login.microsoftonline.com/{tenant}/v2.0/.well-known/openid-configuration?appid={client-id}
+```
 
 ### Cross-tenant scenarios
 
@@ -516,4 +522,4 @@ In this example, you create a policy that emits a custom claim “JoinedData”
 
 ## See also
 
-To learn how to customize claims issued in the SAML token through the Azure portal, see [How to: Customize claims issued in the SAML token for enterprise applications](active-directory-saml-claims-customization.md)
+To learn how to customize claims issued in the SAML token through the Azure portal, see [How to: Customize claims issued in the SAML token for enterprise applications](active-directory-saml-claims-customization.md)

articles/active-directory/develop/active-directory-optional-claims.md

@@ -174,7 +174,7 @@ You can configure optional claims for your application through the UI or applica
                        }
                ]
            }
-	   ```
+	```
 
 2. When finished, click **Save**. Now the specified optional claims will be included in the tokens for your application.    
 

articles/active-directory/saas-apps/sap-successfactors-inbound-provisioning-cloud-only-tutorial.md

@@ -170,8 +170,8 @@ This section provides steps for user account provisioning from SuccessFactors to
    * **Tenant URL –** Enter the name of the SuccessFactors OData API services endpoint. Only enter the host name of server without http or https. This value should look like: **api-server-name.successfactors.com**.
 
    * **Notification Email –** Enter your email address, and check the “send email if failure occurs” checkbox.
-         > [!NOTE]
-         > The Azure AD Provisioning Service sends email notification if the provisioning job goes into a [quarantine](/azure/active-directory/manage-apps/application-provisioning-quarantine-status) state.
+    > [!NOTE]
+    > The Azure AD Provisioning Service sends email notification if the provisioning job goes into a [quarantine](/azure/active-directory/manage-apps/application-provisioning-quarantine-status) state.
 
    * Click the **Test Connection** button. If the connection test succeeds, click the **Save** button at  the top. If it fails, double-check that the SuccessFactors credentials and URL are valid.
     >[!div class="mx-imgBorder"]

articles/active-directory/saas-apps/sap-successfactors-inbound-provisioning-tutorial.md

@@ -255,8 +255,8 @@ In this step, we establish connectivity with SuccessFactors and Active Directory
         > This setting only comes into play for user account creations if the *parentDistinguishedName* attribute is not configured in the attribute mappings. This setting is not used for user search or update operations. The entire domain sub tree falls in the scope of the search operation.
 
    * **Notification Email –** Enter your email address, and check the “send email if failure occurs” checkbox.
-         > [!NOTE]
-         > The Azure AD Provisioning Service sends email notification if the provisioning job goes into a [quarantine](/azure/active-directory/manage-apps/application-provisioning-quarantine-status) state.
+    > [!NOTE]
+    > The Azure AD Provisioning Service sends email notification if the provisioning job goes into a [quarantine](/azure/active-directory/manage-apps/application-provisioning-quarantine-status) state.
 
    * Click the **Test Connection** button. If the connection test succeeds, click the **Save** button at  the top. If it fails, double-check that the SuccessFactors credentials and the AD credentials configured on the agent setup are valid.
     >[!div class="mx-imgBorder"]

articles/azure-maps/choose-map-style.md

@@ -1,5 +1,6 @@
 ---
-title: Map style functionalities in Azure Maps| Microsoft Docs
+title: Choose a map style in Azure Maps
+titleSuffix: Azure Maps
 description: Learn about Azure Maps style related functionalities.
 author: walsehgal
 ms.author: v-musehg

articles/azure-maps/set-android-map-styles.md

@@ -1,5 +1,6 @@
 ---
-title: Map style functionalities in Azure Maps| Microsoft Docs
+title: Set a map style in Azure Maps using Android SDK
+titleSuffix: Azure Maps
 description: Learn about Azure Maps style related functionalities for Android SDK.
 author: walsehgal
 ms.author: v-musehg

articles/azure-monitor/insights/solution-office-365.md

@@ -6,7 +6,7 @@ ms.subservice:
 ms.topic: conceptual
 author: bwren
 ms.author: bwren
-ms.date: 08/13/2019
+ms.date: 12/27/2019
 
 ---