Merge pull request #54883 from datgmachine/master

Update Amazon Business tutorial

Author: ktoliver

articles/active-directory/saas-apps/amazon-business-tutorial.md

@@ -84,25 +84,22 @@ Follow these steps to enable Azure AD SSO in the Azure portal.
 
 	   | | |
 	   |-|-|
-	   | `https://www.amazon.com`|
-	   | `https://www.amazon.co.jp`|
-	   | `https://www.amazon.de`|
+	   | `https://www.amazon.com`| North America |
+	   | `https://www.amazon.co.jp`| East Asia |
+	   | `https://www.amazon.de`| Europe |
 
 	1. In the **Reply URL** text box, type a URL using one of the following patterns:
 
 	   | | |
 	   |-|-|
-	   | `https://www.amazon.com/bb/feature/sso/action/3p_redirect?idpid={idpid}`|
-	   | `https://www.amazon.co.jp/bb/feature/sso/action/3p_redirect?idpid={idpid}`|
-	   | `https://www.amazon.de/bb/feature/sso/action/3p_redirect?idpid={idpid}`|
+	   | `https://www.amazon.com/bb/feature/sso/action/3p_redirect?idpid={idpid}`| North America |
+	   | `https://www.amazon.co.jp/bb/feature/sso/action/3p_redirect?idpid={idpid}`| East Asia |
+	   | `https://www.amazon.de/bb/feature/sso/action/3p_redirect?idpid={idpid}`| Europe |
 
 	   > [!NOTE]
        > The Reply URL value is not real. Update this value with the actual Reply URL. You will get the `<idpid>` value from the Amazon Business SSO configuration section, which is explained later in the tutorial. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Azure portal.
 
-1. Click **Set additional URLs** and perform the following step if you wish to configure the application in **SP** initiated mode:
-
-	In the **Sign-on URL** text box, type a URL:
-    `https://www.amazon.com/`
+1. If you want to configure the application in **SP** initiated mode, you will need to add the full URL provided in the Amazon Business configuration to the **Sign-on URL** in the **Set additional URLs** section.
 
 1. The following screenshot shows the list of default attributes. Edit the attributes by clicking on the **Edit** icon in the **User Attributes & Claims** section.
 
@@ -151,6 +148,9 @@ Follow these steps to enable Azure AD SSO in the Azure portal.
 1. On the **Set up SSO** wizard, select the provider according to your Organizational requirements and click **Next**.
 
 	![Default group](media/amazon-business-tutorial/default-group1.png)
+	
+	> [!NOTE]
+	> Although Microsoft ADFS is a listed option, it won't work with Azure AD SSO.
 
 1. On the **New user account defaults** wizard, select the **Default Group** and then select **Default Buying Role** according to user role in your Organization and click **Next**.
 
@@ -195,7 +195,12 @@ Follow these steps to enable Azure AD SSO in the Azure portal.
 1. Finally in the **SSO Connection details** section the **Status** is shown as **Active**.
 
 	![Connection](media/amazon-business-tutorial/sso-connection5.png)
-
+	
+	> [!NOTE]
+	> If you want to configure the application in **SP** initiated mode, complete the following step, paste the sign-on URL from the screenshot above in the **Sign-on URL** text box of the **Set additional URLs** section in the Azure portal. Use the following format:
+	>
+	> `https://www.amazon.<TLD>/bb/feature/sso/action/start?domain_hint=<uniqueid>`
+    
 ### Create an Azure AD test user
 
 In this section, you'll create a test user in the Azure portal called B.Simon.