Merge pull request #103462 from MicrosoftDocs/repo_sync_working_branch

Confirm merge from repo_sync_working_branch to master to sync with https://github.com/Microsoft/azure-docs (branch master)

Author: huypub

articles/active-directory/saas-apps/eab-navigate-impl-tutorial.md

@@ -81,12 +81,18 @@ Follow these steps to enable Azure AD SSO in the Azure portal.
    ![Edit Basic SAML Configuration](common/edit-urls.png)
 
 1. On the **Basic SAML Configuration** section, enter the values for the following fields:
-
+    In the **Identifier (Entity ID)** text box, enter exactly the following value:
+    `https://impl.bouncer.eab.com`
+    
+    In the **Reply URL (Assertion Consumer Service URL)** text box, enter both the following values as separate rows:
+    `https://impl.bouncer.eab.com/sso/saml2/acs`
+    `https://impl.bouncer.eab.com/sso/saml2/acs/`
+    
     In the **Sign-on URL** text box, type a URL using the following pattern:
     `https://<SUBDOMAIN>.navigate.impl.eab.com/`
 
 	> [!NOTE]
-	> The value is not real. Update the value with the actual Sign-On URL. Contact [EAB Navigate IMPL Client support team](mailto:jmahoney@eab.com) to get the value. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Azure portal.
+	> The value is not real. Update the value with the actual Sign-On URL. Contact [EAB Navigate IMPL Client support team](mailto:EABTechSupport@eab.com) to get the value. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Azure portal.
 
 1. On the **Set up single sign-on with SAML** page, In the **SAML Signing Certificate** section, click copy button to copy **App Federation Metadata Url** and save it on your computer.
 
@@ -124,11 +130,11 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
 
 ## Configure EAB Navigate IMPL SSO
 
-To configure single sign-on on **EAB Navigate IMPL** side, you need to send the **App Federation Metadata Url** to [EAB Navigate IMPL support team](mailto:jmahoney@eab.com). They set this setting to have the SAML SSO connection set properly on both sides.
+To configure single sign-on on **EAB Navigate IMPL** side, you need to send the **App Federation Metadata Url** to [EAB Navigate IMPL support team](mailto:EABTechSupport@eab.com). They set this setting to have the SAML SSO connection set properly on both sides.
 
 ### Create EAB Navigate IMPL test user
 
-In this section, you create a user called B.Simon in EAB Navigate IMPL. Work with [EAB Navigate IMPL support team](mailto:jmahoney@eab.com) to add the users in the EAB Navigate IMPL platform. Users must be created and activated before you use single sign-on.
+In this section, you create a user called B.Simon in EAB Navigate IMPL. Work with [EAB Navigate IMPL support team](mailto:EABTechSupport@eab.com) to add the users in the EAB Navigate IMPL platform. Users must be created and activated before you use single sign-on.
 
 ## Test SSO
 
@@ -144,4 +150,4 @@ When you click the EAB Navigate IMPL tile in the Access Panel, you should be aut
 
 - [What is conditional access in Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/conditional-access/overview)
 
-- [Try EAB Navigate IMPL with Azure AD](https://aad.portal.azure.com/)
+- [Try EAB Navigate IMPL with Azure AD](https://aad.portal.azure.com/)

articles/active-directory/saas-apps/eab-navigate-tutorial.md

@@ -42,7 +42,8 @@ In this tutorial, you configure and test Azure AD SSO in a test environment.
 
 * EAB Navigate supports **SP** initiated SSO
 
-* Once you configure the EAB Navigate you can enforce session controls, which protect exfiltration and infiltration of your organization’s sensitive data in real-time. Session controls extend from Conditional Access. [Learn how to enforce session control with Microsoft Cloud App Security](https://docs.microsoft.com/cloud-app-security/proxy-deployment-any-app).
+> [!NOTE]
+> Identifier of this application is a fixed string value so only one instance can be configured in one tenant.
 
 ## Adding EAB Navigate from the gallery
 
@@ -55,7 +56,6 @@ To configure the integration of EAB Navigate into Azure AD, you need to add EAB
 1. In the **Add from the gallery** section, type **EAB Navigate** in the search box.
 1. Select **EAB Navigate** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
 
-
 ## Configure and test Azure AD single sign-on for EAB Navigate
 
 Configure and test Azure AD SSO with EAB Navigate using a test user called **B.Simon**. For SSO to work, you need to establish a link relationship between an Azure AD user and the related user in EAB Navigate.
@@ -79,33 +79,24 @@ Follow these steps to enable Azure AD SSO in the Azure portal.
 
    ![Edit Basic SAML Configuration](common/edit-urls.png)
 
-1. On the **Basic SAML Configuration** section, if you have **Service Provider metadata file**, perform the following steps:
-
-	a. Click **Upload metadata file**.
-
-    ![Upload metadata file](common/upload-metadata.png)
-
-	b. Click on **folder logo** to select the metadata file and click **Upload**.
-
-	![choose metadata file](common/browse-upload-metadata.png)
-
-	c. After the metadata file is successfully uploaded, the **Identifier** value gets auto populated in Basic SAML Configuration section.
-
-	![EAB Navigate Domain and URLs single sign-on information](common/sp-identifier.png)
-
-	In the **Sign-on URL** text box, type a URL using the following pattern:
-    `https://<SUBDOMAIN>.navigate.eab.com`
-
-	> [!Note]
-	> If the **Identifier** value does not get auto polulated, then please fill in the value manually according to your requirement. The Sign-on URL value is not real. Update this value with the actual Sign-on URL. Contact [EAB Navigate Client support team](mailto:[email protected]) to get this value. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Azure portal.
-
-1. On the **Set up single sign-on with SAML** page, in the **SAML Signing Certificate** section,  find **Certificate (Raw)** and select **Download** to download the certificate and save it on your computer.
+1. On the **Basic SAML Configuration** section, enter the values for the following fields:
+    
+    In the **Identifier (Entity ID)** text box, enter exactly the following value:
+    `https://bouncer.eab.com`
+    
+    In the **Reply URL (Assertion Consumer Service URL)** text box, enter both the following values as separate rows:
+    `https://bouncer.eab.com/sso/saml2/acs`
+    `https://bouncer.eab.com/sso/saml2/acs/`
+    
+    In the **Sign-on URL** text box, type a URL using the following pattern:
+    `https://<SUBDOMAIN>.navigate.eab.com/`
 
-	![The Certificate download link](common/certificateraw.png)
+	> [!NOTE]
+	> The value is not real. Update the value with the actual Sign-On URL. Contact [EAB Navigate Client support team](mailto:[email protected]) to get the value. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Azure portal.
 
-1. On the **Set up EAB Navigate** section, copy the appropriate URL(s) based on your requirement.
+1. On the **Set up single sign-on with SAML** page, In the **SAML Signing Certificate** section, click copy button to copy **App Federation Metadata Url** and save it on your computer.
 
-	![Copy configuration URLs](common/copy-configuration-urls.png)
+	![The Certificate download link](common/copy-metadataurl.png)
 
 ### Create an Azure AD test user
 
@@ -139,13 +130,13 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
 
 ## Configure EAB Navigate SSO
 
-To configure single sign-on on **EAB Navigate** side, you need to send the downloaded **Certificate (Raw)** and appropriate copied URLs from Azure portal to [EAB Navigate support team](mailto:jmahoney@eab.com). They set this setting to have the SAML SSO connection set properly on both sides.
+To configure single sign-on on **EAB Navigate** side, you need to send the **App Federation Metadata Url** to [EAB Navigate support team](mailto:EABTechSupport@eab.com). They set this setting to have the SAML SSO connection set properly on both sides.
 
 ### Create EAB Navigate test user
 
-In this section, you create a user called B.Simon in EAB Navigate. Work with [EAB Navigate support team](mailto:jmahoney@eab.com) to add the users in the EAB Navigate platform. Users must be created and activated before you use single sign-on.
+In this section, you create a user called B.Simon in EAB Navigate. Work with [EAB Navigate support team](mailto:EABTechSupport@eab.com) to add the users in the EAB Navigate platform. Users must be created and activated before you use single sign-on.
 
-## Test SSO 
+## Test SSO
 
 In this section, you test your Azure AD single sign-on configuration using the Access Panel.
 
@@ -163,4 +154,4 @@ When you click the EAB Navigate tile in the Access Panel, you should be automati
 
 - [What is session control in Microsoft Cloud App Security?](https://docs.microsoft.com/cloud-app-security/proxy-intro-aad)
 
-- [How to protect EAB Navigate with advanced visibility and controls](https://docs.microsoft.com/cloud-app-security/proxy-intro-aad)
+- [How to protect EAB Navigate with advanced visibility and controls](https://docs.microsoft.com/cloud-app-security/proxy-intro-aad)