Skip to content

Commit e188dff

Browse files
committed
Merge branch 'master' of https://github.com/MicrosoftDocs/azure-docs-pr into 1598802-seo-role-based-access-control-title-length-02-03
2 parents 8ba1915 + 467e3ac commit e188dff

File tree

694 files changed

+8347
-4561
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

694 files changed

+8347
-4561
lines changed

.openpublishing.redirection.json

Lines changed: 29 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -970,6 +970,11 @@
970970
"redirect_url": "/azure/cognitive-services/LUIS/luis-how-to-azure-subscription",
971971
"redirect_document_id": false
972972
},
973+
{
974+
"source_path": "articles/cognitive-services/QnAMaker/Tutorials/create-publish-answer.md",
975+
"redirect_url": "/azure/cognitive-services/QnAMaker/quickstarts/create-new-kb-csharp",
976+
"redirect_document_id": false
977+
},
973978
{
974979
"source_path": "articles/cognitive-services/QnAMaker/Concepts/data-sources-supported.md",
975980
"redirect_url": "/azure/cognitive-services/QnAMaker/concepts/knowledge-base",
@@ -24505,6 +24510,11 @@
2450524510
"redirect_url": "/azure/virtual-machines/workloads/sap/high-availability-multi-sid",
2450624511
"redirect_document_id": false
2450724512
},
24513+
{
24514+
"source_path": "articles/virtual-machines/virtual-machines-azure-slave-plugin-for-hudson-classic.md",
24515+
"redirect_url": "/azure/virtual-machines/",
24516+
"redirect_document_id": false
24517+
},
2450824518
{
2450924519
"source_path": "articles/virtual-machines/virtual-machines-windows-sap-planning-guide.md",
2451024520
"redirect_url": "/azure/virtual-machines/workloads/sap/planning-guide",
@@ -38597,7 +38607,7 @@
3859738607
},
3859838608
{
3859938609
"source_path": "articles/billing/billing-set-up-alerts.md",
38600-
"redirect_url": "/azure/billing/billing-getting-started",
38610+
"redirect_url": "/azure/cost-management-billing/costs/cost-mgt-alerts-monitor-usage-spending",
3860138611
"redirect_document_id": false
3860238612
},
3860338613
{
@@ -41699,6 +41709,11 @@
4169941709
"source_path": "articles/virtual-machines/windows/classic/capture-image-classic.md",
4170041710
"redirect_url": "/previous-versions/azure/virtual-machines/windows/classic/capture-image-classic",
4170141711
"redirect_document_id": false
41712+
},
41713+
{
41714+
"source_path": "articles/virtual-machines/virtual-machines-availability-set-supportability.md",
41715+
"redirect_url": "/azure/virtual-machines/troubleshooting/virtual-machines-availability-set-supportability",
41716+
"redirect_document_id": false
4170241717
},
4170341718
{
4170441719
"source_path": "articles/virtual-machines/windows/classic/configure-availability-classic.md",
@@ -45085,10 +45100,10 @@
4508545100
"redirect_url": "/azure/iot-central/core/howto-use-action-groups/",
4508645101
"redirect_document_id": true
4508745102
},
45088-
{
45089-
"source_path": "articles/storage/blobs/data-lake-storage-use-power-bi.md",
45090-
"redirect_url": "https://docs.microsoft.com/power-query/connectors/datalakestorage",
45091-
"redirect_document_id": false
45103+
{
45104+
"source_path": "articles/storage/blobs/data-lake-storage-use-power-bi.md",
45105+
"redirect_url": "https://docs.microsoft.com/power-query/connectors/datalakestorage",
45106+
"redirect_document_id": false
4509245107
},
4509345108
{
4509445109
"source_path": "articles/iot-central/preview/howto-use-app-templates.md",
@@ -48015,14 +48030,21 @@
4801548030
"source_path": "articles/cognitive-services/Computer-vision/vs-computer-vision-connected-service.md",
4801648031
"redirect_url": "/azure/cognitive-services/computer-vision/",
4801748032
"redirect_document_id": false
48018-
}, {
48033+
},
48034+
{
4801948035
"source_path": "articles/cognitive-services/Face/vs-face-connected-service.md",
4802048036
"redirect_url": "/azure/cognitive-services/face/",
4802148037
"redirect_document_id": false
48022-
}, {
48038+
},
48039+
{
4802348040
"source_path": "articles/cognitive-services/text-analytics/vs-text-connected-service.md",
4802448041
"redirect_url": "/azure/cognitive-services/text-analytics/",
4802548042
"redirect_document_id": false
48043+
},
48044+
{
48045+
"source_path": "articles/media-services/previous/media-services-configure-fmle-live-encoder.md",
48046+
"redirect_url": "/azure/media-services/previous/media-services-configure-wirecast-live-encoder/",
48047+
"redirect_document_id": false
4802648048
}
4802748049
]
4802848050
}

articles/active-directory-b2c/analytics-with-application-insights.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ manager: celestedg
99
ms.service: active-directory
1010
ms.topic: conceptual
1111
ms.workload: identity
12-
ms.date: 10/12/2018
12+
ms.date: 02/11/2020
1313
ms.author: marsma
1414
ms.subservice: B2C
1515

@@ -154,7 +154,7 @@ Add the profiles to the *TrustFrameworkExtensions.xml* file from the starter pac
154154
<InputClaims>
155155
<!-- Properties of an event are added through the syntax {property:NAME}, where NAME is property being added to the event. DefaultValue can be either a static value or a value that's resolved by one of the supported DefaultClaimResolvers. -->
156156
<InputClaim ClaimTypeReferenceId="PolicyId" PartnerClaimType="{property:Policy}" DefaultValue="{Policy:PolicyId}" />
157-
<InputClaim ClaimTypeReferenceId="CorrelationId" PartnerClaimType="{property:JourneyId}" />
157+
<InputClaim ClaimTypeReferenceId="CorrelationId" PartnerClaimType="{property:JourneyId}" DefaultValue="{Context:CorrelationId}" />
158158
<InputClaim ClaimTypeReferenceId="Culture" PartnerClaimType="{property:Culture}" DefaultValue="{Culture:RFC5646}" />
159159
</InputClaims>
160160
</TechnicalProfile>

articles/active-directory-b2c/azure-monitor.md

Lines changed: 36 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ ms.workload: identity
1111
ms.topic: conceptual
1212
ms.author: marsma
1313
ms.subservice: B2C
14-
ms.date: 02/05/2020
14+
ms.date: 02/10/2020
1515
---
1616

1717
# Monitor Azure AD B2C with Azure Monitor
@@ -20,9 +20,9 @@ Use Azure Monitor to route Azure Active Directory B2C (Azure AD B2C) sign-in and
2020

2121
You can route log events to:
2222

23-
* An Azure storage account.
24-
* An Azure event hub (and integrate with your Splunk and Sumo Logic instances).
25-
* An Azure Log Analytics workspace (to analyze data, create dashboards, and alert on specific events).
23+
* An Azure [storage account](../storage/blobs/storage-blobs-introduction.md).
24+
* An Azure [event hub](../event-hubs/event-hubs-about.md) (and integrate with your Splunk and Sumo Logic instances).
25+
* An [Log Analytics workspace](../azure-monitor/platform/resource-logs-collect-workspace.md) (to analyze data, create dashboards, and alert on specific events).
2626

2727
![Azure Monitor](./media/azure-monitor/azure-monitor-flow.png)
2828

@@ -38,15 +38,15 @@ You can also use the [Azure Cloud Shell](https://shell.azure.com), which include
3838

3939
Azure AD B2C leverages [Azure Active Directory monitoring](../active-directory/reports-monitoring/overview-monitoring.md). To enable *Diagnostic settings* in Azure Active Directory within your Azure AD B2C tenant, you use [delegated resource management](../lighthouse/concepts/azure-delegated-resource-management.md).
4040

41-
You authorize a user in your Azure AD B2C directory (the **Service Provider**) to configure the Azure Monitor instance within the tenant that contains your Azure subscription (the **Customer**). To create the authorization, you deploy an [Azure Resource Manager](../azure-resource-manager/index.yml) template to your Azure AD tenant containing the subscription. The following sections walk you through the process.
41+
You authorize a user or group in your Azure AD B2C directory (the **Service Provider**) to configure the Azure Monitor instance within the tenant that contains your Azure subscription (the **Customer**). To create the authorization, you deploy an [Azure Resource Manager](../azure-resource-manager/index.yml) template to your Azure AD tenant containing the subscription. The following sections walk you through the process.
4242

43-
## Create a resource group
43+
## Create or choose resource group
4444

45-
In the Azure Active Directory (Azure AD) tenant that contains your Azure subscription (*not* the directory that contains your Azure AD B2C tenant), [create a resource group](../azure-resource-manager/management/manage-resource-groups-portal.md#create-resource-groups). Use the following values:
45+
This is the resource group containing the destination Azure storage account, event hub, or Log Analytics workspace to receive data from Azure Monitor. You specify the resource group name when you deploy the Azure Resource Manager template.
4646

47-
* **Subscription**: Select your Azure subscription.
48-
* **Resource group**: Enter name for the resource group. For example, *azure-ad-b2c-monitor*.
49-
* **Region**: Select an Azure location. For example, *Central US*.
47+
[Create a resource group](../azure-resource-manager/management/manage-resource-groups-portal.md#create-resource-groups) or choose an existing one in the Azure Active Directory (Azure AD) tenant that contains your Azure subscription, *not* the directory that contains your Azure AD B2C tenant.
48+
49+
This example uses a resource group named *azure-ad-b2c-monitor* in the *Central US* region.
5050

5151
## Delegate resource management
5252

@@ -205,20 +205,42 @@ Once you've deployed the template and have waited a few minutes for the resource
205205

206206
## Configure diagnostic settings
207207

208-
After you've delegated resource management and have selected your subscription, you're ready to [Create diagnostic settings](../active-directory/reports-monitoring/overview-monitoring.md) in the Azure portal.
208+
Diagnostic settings define where logs and metrics for a resource should be sent. Possible destinations are:
209+
210+
- [Azure storage account](../azure-monitor/platform/resource-logs-collect-storage.md)
211+
- [Event hubs](../azure-monitor/platform/resource-logs-stream-event-hubs.md) solutions.
212+
- [Log Analytics workspace](../azure-monitor/platform/resource-logs-collect-workspace.md)
213+
214+
If you haven't already, create an instance of your chosen destination type in the resource group you specified in the [Azure Resource Manager template](#create-an-azure-resource-manager-template).
215+
216+
### Create diagnostic settings
217+
218+
You're ready to [Create diagnostic settings](../active-directory/reports-monitoring/overview-monitoring.md) in the Azure portal.
209219

210220
To configure monitoring settings for Azure AD B2C activity logs:
211221

212222
1. Sign in to the [Azure portal](https://portal.azure.com/).
213223
1. Select the **Directory + Subscription** icon in the portal toolbar, and then select the directory that contains your Azure AD B2C tenant.
214224
1. Select **Azure Active Directory**
215225
1. Under **Monitoring**, select **Diagnostic settings**.
216-
1. Select **+ Add diagnostic setting**.
226+
1. If there are existing settings on the resource, you will see a list of settings already configured. Either select **Add diagnostic setting** to add a new setting, or **Edit** setting to edit an existing one. Each setting can have no more than one of each of the destination types..
217227

218228
![Diagnostics settings pane in Azure portal](./media/azure-monitor/azure-monitor-portal-05-diagnostic-settings-pane-enabled.png)
219229

230+
1. Give your setting a name if it doesn't already have one.
231+
1. Check the box for each destination to send the logs. Select **Configure** to specify their settings as described in the following table.
232+
233+
| Setting | Description |
234+
|:---|:---|
235+
| Archive to a storage account | Name of storage account. |
236+
| Stream to an event hub | The namespace where the event hub is created (if this is your first time streaming logs) or streamed to (if there are already resources that are streaming that log category to this namespace).
237+
| Send to Log Analytics | Name of workspace. |
238+
239+
1. Select **AuditLogs** and **SignInLogs**.
240+
1. Select **Save**.
241+
220242
## Next steps
221243

222-
For more information about adding and configuring diagnostic settings in Azure Monitor, see this tutorial in the Azure Monitor documentation:
244+
For more information about adding and configuring diagnostic settings in Azure Monitor, see [Tutorial: Collect and analyze resource logs from an Azure resource](../azure-monitor/insights/monitor-azure-resource.md).
223245

224-
[Tutorial: Collect and analyze resource logs from an Azure resource](/azure-monitor/learn/tutorial-resource-logs.md)
246+
For information about streaming Azure AD logs to an event hub, see [Tutorial: Stream Azure Active Directory logs to an Azure event hub](../active-directory/reports-monitoring/tutorial-azure-monitor-stream-logs-to-event-hub.md).

articles/active-directory-b2c/custom-policy-get-started.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -69,7 +69,7 @@ You need to register these two applications in your Azure AD B2C tenant only onc
6969

7070
### Register the IdentityExperienceFramework application
7171

72-
To register an application in your Azure AD B2C tenant, you can use the current **Applications** experience, or our new unified **App registrations (Preview)** experience. [Learn more about the new experience](https://aka.ms/b2cappregintro).
72+
To register an application in your Azure AD B2C tenant, you can use the **App registrations (Legacy)** experience, or our new unified **App registrations (Preview)** experience. [Learn more about the new experience](https://aka.ms/b2cappregintro).
7373

7474
#### [Applications](#tab/applications/)
7575

articles/active-directory-b2c/display-controls.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -86,7 +86,7 @@ Certain display claims are required for certain types of display control. For ex
8686

8787
The **output claims** of a display control are not sent to the next orchestration step. They are saved temporarily only for the current display control session. These temporary claims can be shared between the different actions of the same display control.
8888

89-
To bubble up the output the claims to the next orchestration step, use the **OutputClaims** of the actual self-asserted technical profile which references this display control.
89+
To bubble up the output claims to the next orchestration step, use the **OutputClaims** of the actual self-asserted technical profile which references this display control.
9090

9191
### Display control Actions
9292

articles/active-directory-b2c/identity-provider-azure-ad-multi-tenant-custom.md

Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ manager: celestedg
99
ms.service: active-directory
1010
ms.workload: identity
1111
ms.topic: conceptual
12-
ms.date: 02/06/2020
12+
ms.date: 02/10/2020
1313
ms.author: marsma
1414
ms.subservice: B2C
1515
---
@@ -46,6 +46,19 @@ To enable sign-in for users from a specific Azure AD organization, you need to r
4646
1. Select **Certificates & secrets**, and then select **New client secret**.
4747
1. Enter a **Description** for the secret, select an expiration, and then select **Add**. Record the **Value** of the secret for use in a later step.
4848
49+
## Configuring optional claims
50+
51+
If you want to get the `family_name` and `given_name` claims from Azure AD, you can configure optional claims for your application in the Azure portal UI or application manifest. For more information, see [How to provide optional claims to your Azure AD app](../active-directory/develop/active-directory-optional-claims.md).
52+
53+
1. Sign in to the [Azure portal](https://portal.azure.com). Search for and select **Azure Active Directory**.
54+
1. From the **Manage** section, select **App registrations**.
55+
1. Select the application you want to configure optional claims for in the list.
56+
1. From the **Manage** section, select **Token configuration (preview)**.
57+
1. Select **Add optional claim**.
58+
1. Select the token type you want to configure.
59+
1. Select the optional claims to add.
60+
1. Click **Add**.
61+
4962
## Create a policy key
5063
5164
You need to store the application key that you created in your Azure AD B2C tenant.
@@ -60,19 +73,6 @@ You need to store the application key that you created in your Azure AD B2C tena
6073
1. For **Key usage**, select `Signature`.
6174
1. Select **Create**.
6275
63-
## Configuring optional claims
64-
65-
If you want to get the `family_name` and `given_name` claims from Azure AD, you can configure optional claims for your application in the Azure portal UI or application manifest. For more information, see [How to provide optional claims to your Azure AD app](../active-directory/develop/active-directory-optional-claims.md).
66-
67-
1. Sign in to the [Azure portal](https://portal.azure.com). Search for and select **Azure Active Directory**.
68-
1. From the **Manage** section, select **App registrations**.
69-
1. Select the application you want to configure optional claims for in the list.
70-
1. From the **Manage** section, select **Token configuration (preview)**.
71-
1. Select **Add optional claim**.
72-
1. Select the token type you want to configure.
73-
1. Select the optional claims to add.
74-
1. Click **Add**.
75-
7676
## Add a claims provider
7777
7878
If you want users to sign in by using Azure AD, you need to define Azure AD as a claims provider that Azure AD B2C can communicate with through an endpoint. The endpoint provides a set of claims that are used by Azure AD B2C to verify that a specific user has authenticated.

0 commit comments

Comments
 (0)