resolve merge conflict

Author: b-ahibbard

articles/active-directory-domain-services/policy-reference.md

@@ -1,7 +1,7 @@
 ---
 title: Built-in policy definitions for Azure Active Directory Domain Services
 description: Lists Azure Policy built-in policy definitions for Azure Active Directory Domain Services. These built-in policy definitions provide common approaches to managing your Azure resources.
-ms.date: 08/30/2023
+ms.date: 09/06/2023
 ms.service: active-directory
 ms.subservice: domain-services
 author: justinha

articles/active-directory/app-proxy/application-proxy-configure-complex-application.md

@@ -75,7 +75,7 @@ To publish complex distributed app through Application Proxy with application se
 
 5. In the External Url field, drop down the list and select the custom domain you want to use.
 
-6. Add CORS Rules (optional).  For more information see [Configuring CORS Rule](/graph/api/resources/corsconfiguration_v2?view=graph-rest-beta).
+6. Add CORS Rules (optional).  For more information see [Configuring CORS Rule](/graph/api/resources/corsconfiguration_v2?view=graph-rest-beta&preserve-view=true).
 
 7. Select Create.
 

articles/active-directory/develop/media/multi-service-web-app-clean-up-resources/delete-app-registration.png

@@ -98,6 +98,7 @@ These Microsoft applications support Azure AD's shared device mode:
 - [Microsoft Edge](/microsoft-edge)
 - [Outlook](/mem/intune/apps/app-configuration-policies-outlook)
 - [Microsoft Power Apps](/power-apps)
+- [Microsoft Power BI Mobile](/power-bi/consumer/mobile/) (preview)
 - [Microsoft Viva Engage](/viva/engage/overview) (previously [Yammer](/yammer))
 
 ## Shared device sign-out and the overall app lifecycle

articles/active-directory/develop/media/multi-service-web-app-clean-up-resources/select-app-registration.png

@@ -248,6 +248,7 @@ For iOS, your app requires a background permission to remain active in the backg
 These Microsoft applications support Azure AD's shared device mode:
 
 - [Microsoft Teams](/microsoftteams/platform/) (in Public Preview)
+- [Microsoft Power BI Mobile](/power-bi/consumer/mobile/) (in Public Preview)
 
 > [!IMPORTANT]
 > Public preview is provided without a service-level agreement and isn't recommended for production workloads. Some features might be unsupported or have constrained capabilities. For more information, see [Universal License Terms for Online Services](https://www.microsoft.com/licensing/terms/product/ForOnlineServices/all).

articles/active-directory/develop/msal-android-shared-devices.md

@@ -80,7 +80,7 @@ You now have an app that's secured by the App Service authentication and authori
 
 ## Verify limited access to the web app
 
-When you enabled the App Service authentication/authorization module, an app registration was created in your Azure AD tenant. The app registration has the same display name as your web app. To check the settings, select **Azure Active Directory** from the portal menu, and select **App registrations**. Select the app registration that was created. In the overview, verify that **Supported account types** is set to **My organization only**.
+When you enabled the App Service authentication/authorization module, an app registration was created in your Azure AD tenant. The app registration has the same display name as your web app. To check the settings, sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Application Developer](../roles/permissions-reference.md#application-developer) and browse to **Identity** > **Applications** > **App registrations**. Select the app registration that was created. In the overview, verify that **Supported account types** is set to **My organization only**.
 
 :::image type="content" alt-text="Screenshot that shows verifying access." source="./media/multi-service-web-app-authentication-app-service/verify-access.png":::
 

articles/active-directory/develop/msal-ios-shared-devices.md

@@ -38,9 +38,9 @@ This command might take several minutes to run.
 
 ## Delete the app registration
 
-From the portal menu, select **Azure Active Directory** > **App registrations**. Then select the application you created.
-:::image type="content" alt-text="Screenshot that shows selecting app registration." source="./media/multi-service-web-app-clean-up-resources/select-app-registration.png":::
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Application Developer](../roles/permissions-reference.md#application-developer).
+1. Browse to **Identity** > **Applications** > **App registrations**. 
+1. Select the application you created.
+1. In the app registration overview, select **Delete**.
 
-In the app registration overview, select **Delete**.
-:::image type="content" alt-text="Screenshot that shows deleting the app registration." source="./media/multi-service-web-app-clean-up-resources/delete-app-registration.png":::
 

articles/active-directory/develop/multi-service-web-app-authentication-app-service.md

@@ -47,21 +47,21 @@ Many developers already have tenants through services or subscriptions that are
 
 To check the tenant:
 
-1. Sign in to the <a href="https://portal.azure.com/" target="_blank">Azure portal</a>. Use the account you'll use to manage your application.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Tenant Creator](../roles/permissions-reference.md#tenant-creator).
 1. Check the upper-right corner. If you have a tenant, you'll automatically be signed in. You see the tenant name directly under your account name.
    * Hover over your account name to see your name, email address, directory or tenant ID (a GUID), and domain.
    * If your account is associated with multiple tenants, you can select your account name to open a menu where you can switch between tenants. Each tenant has its own tenant ID.
 
 > [!TIP]
 > To find the tenant ID, you can:
 > * Hover over your account name to get the directory or tenant ID.
-> * Search and select **Azure Active Directory** > **Overview** > **Tenant ID** in the Azure portal.
+> * Select **Identity** > **Overview** and look for **Tenant ID**.
 
 If you don't have a tenant associated with your account, you'll see a GUID under your account name. You won't be able to do actions like registering apps until you create an Azure AD tenant.
 
 ### Create a new Azure AD tenant
 
-If you don't already have an Azure AD tenant or if you want to create a new one for development, see [Create a new tenant in Azure AD](../fundamentals/create-new-tenant.md) or use the [directory creation experience](https://portal.azure.com/#create/Microsoft.AzureActiveDirectory) in the Azure portal. If you want to create a tenant for app testing, see [build a test environment](test-setup-environment.md).
+If you don't already have an Azure AD tenant or if you want to create a new one for development, see [Create a new tenant in Azure AD](../fundamentals/create-new-tenant.md). If you want to create a tenant for app testing, see [build a test environment](test-setup-environment.md).
 
 You'll provide the following information to create your new tenant:
 

articles/active-directory/develop/multi-service-web-app-clean-up-resources.md

@@ -56,7 +56,7 @@ The server can revoke refresh tokens because of a change in credentials, user ac
 
 - [Access tokens in the Microsoft identity platform](access-tokens.md) 
 - [ID tokens in the Microsoft identity platform](id-tokens.md)
-- [Invalidate refresh token](/powershell/module/microsoft.graph.beta.users.actions/invoke-mgbetainvalidateuserrefreshtoken?view=graph-powershell-beta)
+- [Invalidate refresh token](/powershell/module/microsoft.graph.beta.users.actions/invoke-mgbetainvalidatealluserrefreshtoken?view=graph-powershell-beta&preserve-view=true)
 - [Single sign-out](v2-protocols-oidc.md#single-sign-out)
 
 ## Next steps