You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/conditional-access/overview.md
+4-2Lines changed: 4 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,15 +6,15 @@ services: active-directory
6
6
ms.service: active-directory
7
7
ms.subservice: conditional-access
8
8
ms.topic: overview
9
-
ms.date: 11/07/2022
9
+
ms.date: 02/13/2023
10
10
11
11
ms.author: joflore
12
12
author: MicrosoftGuyJFlo
13
13
manager: amycolannino
14
14
ms.reviewer: calebb
15
15
16
16
ms.collection: M365-identity-device-management
17
-
ms.custom: contperf-fy20q4, azuread-video-2020
17
+
ms.custom: zt-include
18
18
---
19
19
# What is Conditional Access?
20
20
@@ -97,6 +97,8 @@ When licenses required for Conditional Access expire, policies aren't automatica
97
97
98
98
[Security defaults](../fundamentals/concept-fundamentals-security-defaults.md) help protect against identity-related attacks and are available for all customers.
Copy file name to clipboardExpand all lines: articles/active-directory/external-identities/b2b-tutorial-require-mfa.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,7 @@ services: active-directory
6
6
ms.service: active-directory
7
7
ms.subservice: B2B
8
8
ms.topic: tutorial
9
-
ms.date: 01/07/2022
9
+
ms.date: 02/03/2023
10
10
11
11
ms.author: cmulligan
12
12
author: csmulligan
@@ -50,7 +50,7 @@ If you don’t have an Azure subscription, create a [free account](https://azure
50
50
51
51
To complete the scenario in this tutorial, you need:
52
52
53
-
-**Access to Azure AD Premium edition**, which includes Conditional Access policy capabilities. To enforce MFA, you need to create an Azure AD Conditional Access policy. MFA policies are always enforced at your organization, regardless of whether the partner has MFA capabilities.
53
+
-**Access to [Azure AD Premium edition](/security/business/identity-access/azure-active-directory-pricing)**, which includes Conditional Access policy capabilities. To enforce MFA, you need to create an Azure AD Conditional Access policy. MFA policies are always enforced at your organization, regardless of whether the partner has MFA capabilities.
54
54
-**A valid external email account** that you can add to your tenant directory as a guest user and use to sign in. If you don't know how to create a guest account, see [Add a B2B guest user in the Azure portal](add-users-administrator.md).
# Customer intent: As a tenant administrator, I want to know about the current limitations for Azure AD B2B collaboration.
17
19
---
18
20
19
21
# Limitations of Azure AD B2B collaboration
@@ -23,7 +25,7 @@ Azure Active Directory (Azure AD) B2B collaboration is currently subject to the
23
25
With Azure AD B2B, you can enforce multi-factor authentication at the resource organization (the inviting organization). The reasons for this approach are detailed in [Conditional Access for B2B collaboration users](authentication-conditional-access.md). If a partner already has multi-factor authentication set up and enforced, their users might have to perform the authentication once in their home organization and then again in yours.
24
26
25
27
## Instant-on
26
-
In the B2B collaboration flows, we add users to the directory and dynamically update them during invitation redemption, app assignment, and so on. The updates and writes ordinarily happen in one directory instance and must be replicated across all instances. Replication is completed once all instances are updated. Sometimes when the object is written or updated in one instance and the call to retrieve this object is to another instance, replication latencies can occur. If that happens, refresh or retry to help. If you are writing an app using our API, then retries with some back-off is a good, defensive practice to alleviate this issue.
28
+
In the B2B collaboration flows, we add users to the directory and dynamically update them during invitation redemption, app assignment, and so on. The updates and writes ordinarily happen in one directory instance and must be replicated across all instances. Replication is completed once all instances are updated. Sometimes when the object is written or updated in one instance and the call to retrieve this object is to another instance, replication latencies can occur. If that happens, refresh or retry to help. If you're writing an app using our API, then retries with some back-off is a good, defensive practice to alleviate this issue.
27
29
28
30
## Azure AD directories
29
31
Azure AD B2B is subject to Azure AD service directory limits. For details about the number of directories a user can create and the number of directories to which a user or guest user can belong, see [Azure AD service limits and restrictions](../enterprise-users/directory-service-limits-restrictions.md).
If you plan to keep using AD FS with on-premises & SaaS Applications using SAML / WS-FED or Oauth protocol, you'll use both AD FS and Azure AD after you convert the domains for user authentication. In this case, you can protect your on-premises applications and resources with Secure Hybrid Access (SHA) through [Azure AD Application Proxy](../app-proxy/what-is-application-proxy.md) or one of [Azure AD partner integrations](../manage-apps/secure-hybrid-access.md). Using Application Proxy or one of our partners can provide secure remote access to your on-premises applications. Users benefit by easily connecting to their applications from any device after a [single sign-on](../manage-apps/add-application-portal-setup-sso.md).
433
435
434
436
You can move SaaS applications that are currently federated with ADFS to Azure AD. Reconfigure to authenticate with Azure AD either via a built-in connector from the [Azure App gallery](https://azuremarketplace.microsoft.com/marketplace/apps/category/azure-active-directory-apps), or by [registering the application in Azure AD](../develop/quickstart-register-app.md).
# What are Azure Active Directory recommendations?
22
22
23
-
Keeping track of all the settings and resources in your tenant can be overwhelming. The Azure Active Directory (Azure AD) recommendations feature helps monitor the status of your tenant so you don't have to. Azure AD recommendations helps ensure your tenant is in a secure and healthy state while also helping you maximize the value of the features available in Azure AD.
23
+
Keeping track of all the settings and resources in your tenant can be overwhelming. The Azure Active Directory (Azure AD) recommendations feature helps monitor the status of your tenant so you don't have to. The Azure AD recommendations feature helps ensure your tenant is in a secure and healthy state while also helping you maximize the value of the features available in Azure AD.
24
24
25
25
The Azure AD recommendations feature provides you with personalized insights with actionable guidance to:
26
26
27
27
- Help you identify opportunities to implement best practices for Azure AD-related features.
28
28
- Improve the state of your Azure AD tenant.
29
29
- Optimize the configurations for your scenarios.
30
30
31
-
This article gives you an overview of how you can use Azure AD recommendations. As an administrator, you should review your tenant's recommendations, and their associated resources periodically.
31
+
This article gives you an overview of how you can use Azure AD recommendations. As an administrator, you should review your tenant's Azure AD recommendations, and their associated resources periodically.
32
32
33
33
## What it is
34
34
35
-
Azure AD recommendations is the Azure AD specific implementation of [Azure Advisor](../../advisor/advisor-overview.md), which is a personalized cloud consultant that helps you follow best practices to optimize your Azure deployments. Azure Advisor analyzes your resource configuration and usage data to recommend solutions that can help you improve the cost effectiveness, performance, reliability, and security of your Azure resources.
35
+
The Azure AD recommendations feature is the Azure AD specific implementation of [Azure Advisor](../../advisor/advisor-overview.md), which is a personalized cloud consultant that helps you follow best practices to optimize your Azure deployments. Azure Advisor analyzes your resource configuration and usage data to recommend solutions that can help you improve the cost effectiveness, performance, reliability, and security of your Azure resources.
36
36
37
-
*Azure AD recommendations*uses similar data to support you with the roll-out and management of Microsoft's best practices for Azure AD tenants to keep your tenant in a secure and healthy state. Azure AD recommendations provide a holistic view into your tenant's security, health, and usage.
37
+
*Azure AD recommendations*use similar data to support you with the roll-out and management of Microsoft's best practices for Azure AD tenants to keep your tenant in a secure and healthy state. Azure AD recommendations provide a holistic view into your tenant's security, health, and usage.
38
38
39
39
## How it works
40
40
41
-
On a daily basis, Azure AD analyzes the configuration of your tenant. During this analysis, Azure AD compares the data of a recommendation with the actual configuration of your tenant. If a recommendation is flagged as applicable to your tenant, the recommendation appears in the **Recommendations** section of the Azure AD Overview area. Recommendations are listed in order of priority so you can quickly determine where to focus first.
41
+
On a daily basis, Azure AD analyzes the configuration of your tenant. During this analysis, Azure AD compares the data of a recommendation with the actual configuration of your tenant. If a recommendation is flagged as applicable to your tenant, the recommendation appears in the **Recommendations** section of the Azure AD Overview area. The recommendations are listed in order of priority so you can quickly determine where to focus first.
42
42
43
-
Recommendations contain a description, a summary of the value of addressing the recommendation, and a step-by-step action plan. If applicable, impacted resources associated with the recommendation are listed, so you can resolve each affected area. If a recommendation doesn't have any associated resources, the impacted resource type is *Tenant level*. so your step-by-step action plan impacts the entire tenant and not just a specific resource.
43
+
Each recommendation contains a description, a summary of the value of addressing the recommendation, and a step-by-step action plan. If applicable, impacted resources associated with the recommendation are listed, so you can resolve each affected area. If a recommendation doesn't have any associated resources, the impacted resource type is *Tenant level*. so your step-by-step action plan impacts the entire tenant and not just a specific resource.
44
44
45
45
46
46
@@ -60,7 +60,7 @@ The **Priority** of a recommendation could be low, medium, or high. These values
60
60
-**Medium**: Should do. No severe risk if action isn't taken.
61
61
-**Low**: Might do. No security risks or health concerns if action isn't taken.
62
62
63
-
The **Impacted resources** for a recommendation could be things like applications or users. This detail gives you an idea of what type of resources you'll need to address. The impacted resource could also be at the tenant level, so you may need to make a global change.
63
+
The **Impacted resources** for a recommendation could be things like applications or users. This detail gives you an idea of what type of resources you need to address. The impacted resource could also be at the tenant level, so you may need to make a global change.
64
64
65
65
The **Status description** tells you the date the recommendation status changed and if it was changed by the system or a user.
66
66
@@ -84,7 +84,7 @@ The following roles provide *update and read-only* access to recommendations:
84
84
- Cloud apps Administrator
85
85
- Apps Administrator
86
86
87
-
Azure AD recommendations is automatically enabled. If you'd like to disable this feature, go to **Azure AD** > **Preview features**. Locate the **Recommendations** feature, and change the **State**.
87
+
The Azure AD recommendations feature is automatically enabled. If you'd like to disable this feature, go to **Azure AD** > **Preview features**. Locate the **Recommendations** feature, and change the **State**.
88
88
89
89
Azure AD only displays the recommendations that apply to your tenant, so you may not see all supported recommendations listed. Some recommendations are available in all tenants, regardless of the license type, but others require the [Workload Identities premium license](../identity-protection/concept-workload-identity-risk.md).
90
90
@@ -99,17 +99,6 @@ The recommendations listed in the following table are available to all Azure AD
99
99
|[Migrate to Microsoft Authenticator](recommendation-migrate-to-authenticator.md)| Users | Preview |
100
100
|[Minimize MFA prompts from known devices](recommendation-migrate-apps-from-adfs-to-azure-ad.md)| Users | Generally available |
101
101
102
-
### Recommendations available for Workload Identities premium licenses
103
-
104
-
The recommendations listed in the following table are available to Azure AD tenants with a Workload Identities premium license.
| Renew expiring service principal credentials | Applications | Preview |
112
-
113
102
## How to use Azure AD recommendations
114
103
115
104
1. Go to **Azure AD** > **Recommendations**.
@@ -120,11 +109,16 @@ The recommendations listed in the following table are available to Azure AD tena
120
109
121
110
1. Follow the **Action plan**.
122
111
123
-
1. If applicable, right-click on a resource in a recommendation, select **Mark as**, then select a status.
112
+
1. If applicable, *right-click on the status* of a resource in a recommendation, select **Mark as**, then select a status.
124
113
114
+
- The status for the resource appears as regular text, but you can right-click on the status to open the menu.
115
+
- You can set each resource to a different status as needed.
116
+
125
117
126
118
127
-
1. If you need to manually change the status of a recommendation, select **Mark as** from the top of the page and select a status.
119
+
1. The recommendation service automatically marks the recommendation as complete, but if you need to manually change the status of a recommendation, select **Mark as** from the top of the page and select a status.
120
+
121
+
128
122
129
123
- Mark a recommendation as **Completed** if all impacted resources have been addressed.
130
124
- Active resources may still appear in the list of resources for manually completed recommendations. If the resource is completed, the service will update the status the next time the service runs.
Copy file name to clipboardExpand all lines: articles/azure-arc/data/backup-restore-postgresql.md
+30-1Lines changed: 30 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -13,6 +13,35 @@ ms.topic: how-to
13
13
14
14
# Back up and restore Azure Arc-enabled PostgreSQL servers
15
15
16
-
Automated backups can be enabled by including the `--storage-class-backups` argument when creating an Azure Arc-enabled PostgreSQL server. Restore is not supported in the current preview release.
16
+
Automated backups can be enabled by including the `--storage-class-backups` argument when creating an Azure Arc-enabled PostgreSQL server. Specify the retention period for backups with the `--retention-days` parameter, when creating or updating an Arc-enabled PostgreSQL server. The retention period can be between 0 and 35 days. If backups are enabled but no retention period is specified, the default is seven days.
17
+
18
+
Restoring an Azure Arc-enable PostgreSQL server creates a new server by copying the configuration of the existing server (for example resource requests/limits, extensions etc.). Configurations that could cause conflicts (for example primary endpoint port) aren't copied. The storage configuration for the new resource can be defined by passing `--storage-class*` and `--volume-size-*` parameters to the `restore` command.
19
+
20
+
Restore an Azure Arc-enabled PostgreSQL server to a new server with the `restore` command:
0 commit comments