edit pass: goodpractice-toolkit-tutorial

Author: BobbySchmidt2

articles/active-directory/saas-apps/goodpractice-toolkit-tutorial.md

@@ -20,45 +20,45 @@ ms.collection: M365-identity-device-management
 ---
 # Tutorial: Azure Active Directory integration with Mind Tools Toolkit
 
-In this tutorial, you'll learn how to integrate Mind Tools Toolkit with Azure Active Directory (Azure AD).
-When you integrate Mind Tools Toolkit with Azure AD, you can:
+In this tutorial, you learn how to integrate Mind Tools Toolkit with Azure Active Directory (Azure AD).
+
+With this integration, you can:
 
 * Control in Azure AD who has access to Mind Tools Toolkit.
-* Enable your users to be automatically signed to Mind Tools Toolkit (SSO) with their Azure AD accounts.
-* Manage your accounts in one central location, the Azure portal.
+* Enable your users to be automatically signed in to Mind Tools Toolkit (single sign-on) with their Azure AD accounts.
+* Manage your accounts in one central location: the Azure portal.
 
-For details about software as a service (SaaS) app integration with Azure AD, see [What is application access and single sign-on with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/manage-apps/what-is-single-sign-on).
+To learn more about software as a service (SaaS) app integration with Azure AD, see [What is application access and single sign-on with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/manage-apps/what-is-single-sign-on).
 
 ## Prerequisites
 
 To configure Azure AD integration with Mind Tools Toolkit, you need the following items:
 
 * An Azure AD subscription. If you don't have a subscription, you can get a [free account](https://azure.microsoft.com/free/).
-* A Mind Tools Toolkit subscription with single sign-on enabled.
+* A Mind Tools Toolkit subscription with single sign-on (SSO) enabled.
 
 ## Scenario description
 
 In this tutorial, you configure and test Azure AD single sign-on in a test environment.
 
 * Mind Tools Toolkit supports SP-initiated SSO.
 * Mind Tools Toolkit supports just-in-time user provisioning.
-* After you configure Mind Tools Toolkit, you can enforce session control. This control helps protect exfiltration and infiltration of your organization's sensitive data in real time. Session control extends from conditional access. [Learn how to enforce session control with Microsoft Cloud App Security](https://docs.microsoft.com/cloud-app-security/proxy-deployment-any-app).
+* After you configure Mind Tools Toolkit, you can enforce session control. This control protects exfiltration and infiltration of your organization's sensitive data in real time. Session control extends from conditional access. [Learn how to enforce session control with Microsoft Cloud App Security](https://docs.microsoft.com/cloud-app-security/proxy-deployment-any-app).
 
 ## Add Mind Tools Toolkit from the gallery
 
 To configure the integration of Mind Tools Toolkit into Azure AD, you need to add Mind Tools Toolkit from the gallery to your list of managed SaaS apps.
 
 1. Sign in to the [Azure portal](https://portal.azure.com) by using either a work or school account, or a personal Microsoft account.
-1. On the left pane, select **Azure Active Directory**.
+1. On the leftmost navigation pane, select the **Azure Active Directory** service.
 1. Go to **Enterprise Applications**, and then select **All Applications**.
 1. To add a new application, select **New application**.
 1. In the **Add from the gallery** section, enter **Mind Tools Toolkit** in the search box.
 1. Select **Mind Tools Toolkit** from the search results, and then add the app. Wait a few seconds while the app is added to your tenant.
 
 ## Configure and test Azure AD single sign-on
 
-Configure and test Azure AD single sign-on with Mind Tools Toolkit by using a test user called **B.Simon**.
-For single sign-on to work, you must establish a linked relationship between an Azure AD user and the related user in Mind Tools Toolkit.
+In this section, you configure and test Azure AD single sign-on with Mind Tools Toolkit by using a test user called **B.Simon**. For single sign-on to work, you must establish a linked relationship between an Azure AD user and the related user in Mind Tools Toolkit.
 
 To configure and test Azure AD single sign-on with Mind Tools Toolkit, complete the following building blocks:
 
@@ -71,89 +71,88 @@ To configure and test Azure AD single sign-on with Mind Tools Toolkit, complete
 
 ### Configure Azure AD SSO
 
-Follow these steps to enable and configure Azure AD single sign-on with Mind Tools Toolkit:
+In this section, you configure Azure AD single sign-on with Mind Tools Toolkit by following these steps:
 
 1. In the [Azure portal](https://portal.azure.com/), on the **Mind Tools Toolkit** application integration page, select **Single sign-on**.
 
-    ![The Manage section with Single sign-on highlighted](common/select-sso.png)
-
-1. On the **Select a Single sign-on method** pane, select **SAML/WS-Fed** mode to enable single sign-on.
+    ![The Manage section, with Single sign-on highlighted](common/select-sso.png)
 
-    ![The Select a single sign-on method section with SAML highlighted](common/select-saml-option.png)
+1. In the **Select a Single sign-on method** dialog box, select **SAML/WS-Fed** to enable single sign-on.
 
-1. On the **Set up Single Sign-On with SAML** pane, select the pencil icon to open **Basic SAML Configuration** pane.
+    ![The Select a single sign-on method dialog box, with SAML highlighted](common/select-saml-option.png)
 
-    ![The Set up a Single Sign-On with SAML pane with the pencil icon highlighted](common/edit-urls.png)
+1. On the **Set up Single Sign-On with SAML** page, select the pencil icon for **Basic SAML Configuration** to edit the settings.
 
-1. On the **Basic SAML Configuration** section, perform the following steps:
+    ![The Set up Single Sign-On with SAML page, with the pencil icon for Basic SAML Configuration highlighted](common/edit-urls.png)
 
-    In the **Sign-on URL** text box, type a URL using the following pattern:
-    `https://app.goodpractice.net/#/<subscriptionUrl>/s/<locationId>`.
+1. In the **Basic SAML Configuration** section, in the **Sign-on URL** box, enter a URL having the pattern `https://app.goodpractice.net/#/<subscriptionUrl>/s/<locationId>`.
 
     > [!NOTE]
-    > The Sign-on URL value is not real. Update the value with the actual Sign-On URL. Contact [Mind Tools Toolkit Client support team](mailto:[email protected]) to get the value.
+    > The **Sign-on URL** value isn't real. Update the value with the actual sign-on URL. Contact the [Mind Tools Toolkit Client support team](mailto:[email protected]) to get the value.
 
-1. On the **Set up Single Sign-On with SAML** page, in the **SAML Signing Certificate** section, click **Download** to download the **Federation Metadata XML** from the given options as per your requirement and save it on your computer.
+1. On the **Set-up Single Sign-On with SAML** page, go to the **SAML Signing Certificate** section. To the right of **Federation Metadata XML**, select **Download** to download the XML text and save it on your computer. The XML contents depend on the options you select.
 
-    ![The Certificate download link](common/metadataxml.png)
+    ![The SAML Signing Certificate section, with Download highlighted next to Federation Metadata XML](common/metadataxml.png)
 
-1. On the **Set up Mind Tools Toolkit** section, copy the appropriate URL(s) as per your requirement.
+1. In the **Set up Mind Tools Toolkit** section, copy whichever of the following URLs you need.
 
-    ![Copy configuration URLs](common/copy-configuration-urls.png)
+    * **Login URL**
 
-    1. Login URL
+    * **Azure AD Identifier**
 
-    1. Azure AD Identifier
+    * **Logout URL**
 
-    1. Logout URL
+    ![The Set up Mind Tools Toolkit section, with the configuration URLs highlighted](common/copy-configuration-urls.png)
 
 ### Create an Azure AD test user
 
-In this section, you'll create a test user in the Azure portal called B.Simon.
+In this section, you create a test user called B.Simon in the Azure portal:
 
-1. From the left pane in the Azure portal, select **Azure Active Directory**, select **Users**, and then select **All users**.
-1. Select **New user** at the top of the screen.
+1. On the leftmost side of the Azure portal, select **Azure Active Directory** > **Users** > **All users**.
+1. At the top of the screen, select **New user**.
 1. In the **User** properties, follow these steps:
-   1. In the **Name** field, enter `B.Simon`.  
-   1. In the **User name** field, enter the [email protected]. For example, `[email protected]`.
-   1. Select the **Show password** check box, and then write down the value that's displayed in the **Password** box.
-   1. Click **Create**.
+   1. In the **Name** field, enter **B.Simon**.  
+   1. In the **User name** field, enter **B.Simon@**_companydomain_**.**_extension_. For example, **[email protected]**.
+   1. Select the **Show password** check box, and then write down the value that's shown in the **Password** box.
+   1. Select **Create**.
 
 ### Assign the Azure AD test user
 
 In this section, you enable B.Simon to use Azure single sign-on by granting access to Mind Tools Toolkit.
 
-1. In the Azure portal, select **Enterprise Applications**, and then select **All applications**.
+1. In the Azure portal, select **Enterprise Applications** > **All applications**.
 1. In the applications list, select **Mind Tools Toolkit**.
-1. In the app's overview page, find the **Manage** section and select **Users and groups**.
+1. In the app's overview page, go to the **Manage** section, and select **Users and groups**.
 
-   ![The "Users and groups" link](common/users-groups-blade.png)
+   ![The Manage section, with Users and groups highlighted](common/users-groups-blade.png)
 
-1. Select **Add user**, then select **Users and groups** in the **Add Assignment** dialog.
+1. Select **Add user**. In the **Add Assignment** dialog box, select **Users and groups**.
 
-   ![The Add User link](common/add-assign-user.png)
+   ![The Users and groups window, with Add user highlighted](common/add-assign-user.png)
 
-1. In the **Users and groups** dialog, select **B.Simon** from the Users list, then click the **Select** button at the bottom of the screen.
-1. If you're expecting any role value in the SAML assertion, in the **Select Role** dialog, select the appropriate role for the user from the list and then click the **Select** button at the bottom of the screen.
-1. In the **Add Assignment** dialog, click the **Assign** button.
+1. In the **Users and groups** dialog box, select **B.Simon** from the users list. Then  choose the **Select** button at the bottom of the screen.
+1. If you expect any role value in the SAML assertion, in the **Select Role** dialog box, select the appropriate role for the user from the list. Then choose the **Select** button at the bottom of the screen.
+1. In the **Add Assignment** dialog box, select **Assign**.
 
 ## Configure Mind Tools Toolkit SSO
 
-To configure single sign-on on **Mind Tools Toolkit** side, you need to send the downloaded **Federation Metadata XML** and appropriate copied URLs from Azure portal to [Mind Tools Toolkit support team](mailto:[email protected]). They set this setting to have the SAML SSO connection set properly on both sides.
+To configure single sign-on on the **Mind Tools Toolkit** side, send the downloaded **Federation Metadata XML** text and the previously copied URLs to the [Mind Tools Toolkit support team](mailto:[email protected]). They configure this setting to have the SAML SSO connection set properly on both sides.
 
 ### Create a Mind Tools Toolkit test user
 
-In this section, a user called B.Simon is created in Mind Tools Toolkit. Mind Tools Toolkit supports **just-in-time provisioning**, which is enabled by default. There is no action item for you in this section. If a user doesn't already exist in Mind Tools Toolkit, a new one is created when you attempt to access Mind Tools Toolkit.
+In this section, you create a user called B.Simon in Mind Tools Toolkit.
+
+Mind Tools Toolkit supports just-in-time provisioning, which is enabled by default. There's no action for you to take in this section. If a user doesn't already exist in Mind Tools Toolkit, a new one is created when you attempt to access Mind Tools Toolkit.
 
 ### Test SSO
 
-In this section, you test your Azure AD single sign-on configuration using the Access Panel.
+In this section, you test your Azure AD single sign-on configuration by using the My Apps portal.
 
-When you click the Mind Tools Toolkit tile in the Access Panel, you should be automatically signed in to the Mind Tools Toolkit for which you set up SSO. For more information about the Access Panel, see [Introduction to the Access Panel](https://docs.microsoft.com/azure/active-directory/active-directory-saas-access-panel-introduction).
+When you select the Mind Tools Toolkit tile in the My Apps portal, you are automatically signed in to the Mind Tools Toolkit for which you set up SSO. For more information about the My Apps portal, see [Introduction to the My Apps portal](https://docs.microsoft.com/azure/active-directory/active-directory-saas-access-panel-introduction).
 
 ## Additional Resources
 
-- [List of Tutorials on How to Integrate SaaS Apps with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/active-directory-saas-tutorial-list)
+- [Tutorials for integrating SaaS apps with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/active-directory-saas-tutorial-list)
 
 - [What is application access and single sign-on with Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/manage-apps/what-is-single-sign-on)