Merge pull request #182729 from MicrosoftDocs/master

12/13 PM Publish

Author: huypub

.github/workflows/stale.yml

@@ -19,8 +19,8 @@ jobs:
         close-pr-label: auto-close
         exempt-pr-labels: keep-open
         operations-per-run: 1200
-        ascending: false
-        # start-date: '2021-02-16'
+        ascending: true
+        start-date: '2021-03-19'
         stale-pr-message: >
           This pull request has been inactive for at least 14 days.
           If you are finished with your changes, don't forget to sign off. See the [contributor guide](https://review.docs.microsoft.com/help/contribute/contribute-how-to-write-pull-request-automation) for instructions.

.openpublishing.redirection.active-directory.json

@@ -4400,6 +4400,21 @@
             "redirect_url": "/azure/active-directory/cloud-sync/tutorial-pilot-aadc-aadccp",
             "redirect_document_id": false
         },
+        {
+            "source_path_from_root": "/articles/active-directory/governance/what-is-app-provisioning.md",
+            "redirect_url": "/azure/active-directory/app-provisioning/user-provisioning",
+            "redirect_document_id": false
+        },
+{
+            "source_path_from_root": "/articles/active-directory/governance/what-is-hr-driven-provisioning.md",
+            "redirect_url": "azure/active-directory/app-provisioning/what-is-hr-driven-provisioning",
+            "redirect_document_id": false
+        },
+{
+            "source_path_from_root": "/articles/active-directory/governance/what-is-inter-directory-provisioning.md",
+            "redirect_url": "azure/active-directory/hybrid/what-is-inter-directory-provisioning",
+            "redirect_document_id": false
+        },
         {
             "source_path_from_root": "/articles/active-directory/cloud-provisioning/tutorial-single-forest.md",
             "redirect_url": "/azure/active-directory/cloud-sync/tutorial-single-forest",

articles/active-directory/governance/media/what-is-hr-driven-provisioning/cloud2a.png renamed to articles/active-directory/app-provisioning/media/what-is-hr-driven-provisioning/cloud2a.png

@@ -35,9 +35,8 @@ For information on Microsoft Identity Manager and the systems it supports see th
 [!INCLUDE [active-directory-hr-provisioning.md](../../../includes/active-directory-hr-provisioning.md)]
 
 
-
 ## Next steps 
-- [What is identity lifecycle management](what-is-identity-lifecycle-management.md)
-- [What is provisioning?](what-is-provisioning.md)
-- [What is app provisioning?](what-is-app-provisioning.md)
-- [What is inter-directory provisioning?](what-is-inter-directory-provisioning.md)
+- [What is identity lifecycle management](../governance/what-is-identity-lifecycle-management.md)
+- [What is provisioning?](../governance/what-is-provisioning.md)
+- [What is app provisioning?](../app-provisioning/user-provisioning.md)
+- [What is inter-directory provisioning?](../hybrid/what-is-inter-directory-provisioning.md)

articles/active-directory/governance/what-is-hr-driven-provisioning.md renamed to articles/active-directory/app-provisioning/what-is-hr-driven-provisioning.md

@@ -119,7 +119,7 @@ If you have problems with using SSPR from the Windows sign-in screen, the Azure
 
 When users reset their password from the sign-in screen of a Windows 10 device, a low-privilege temporary account called `defaultuser1` is created. This account is used to keep the password reset process secure.
 
-The account itself has a randomly generated password, doesn't show up for device sign-in, and is automatically removed after the user resets their password. Multiple `defaultuser` profiles may exist but can be safely ignored.
+The account itself has a randomly generated password, which is validated against an organizations password policy, doesn't show up for device sign-in, and is automatically removed after the user resets their password. Multiple `defaultuser` profiles may exist but can be safely ignored.
 
 ## Windows 7, 8, and 8.1 password reset
 
@@ -187,4 +187,4 @@ More information for users on using this feature can be found in [Reset your wor
 
 ## Next steps
 
-To simplify the user registration experience, you can [pre-populate user authentication contact information for SSPR](howto-sspr-authenticationdata.md).
+To simplify the user registration experience, you can [pre-populate user authentication contact information for SSPR](howto-sspr-authenticationdata.md).

articles/active-directory/authentication/howto-sspr-windows.md

@@ -11,9 +11,9 @@ ms.date: 07/13/2020
 ms.author: justinha
 author: justinha
 manager: daveba
+ms.collection: M365-identity-device-management
 
 # Customer intent: As an Azure AD Administrator, I want to learn how to use Azure Identity Protection to protect users by automatically detecting risk sign-in behavior and prompting for additional forms of authentication or request a password change.
-ms.collection: M365-identity-device-management
 ---
 # Tutorial: Use risk detections for user sign-ins to trigger Azure AD Multi-Factor Authentication or password changes
 

articles/active-directory/authentication/tutorial-risk-based-sspr-mfa.md

@@ -7,7 +7,7 @@ manager: daveba
 ms.service: active-directory
 ms.workload: identity
 ms.topic: how-to
-ms.date: 10/19/2021
+ms.date: 12/13/2021
 ms.subservice: hybrid
 ms.author: billmath
 ms.collection: M365-identity-device-management
@@ -100,7 +100,7 @@ To verify that the agent is running:
 >[!IMPORTANT]
 >The agent has been installed, but it must be configured and enabled before it will start synchronizing users. To configure a new agent, see [Create a new configuration for Azure AD Connect cloud sync](how-to-configure.md).
 
-### Enable password writeback in Azure AD Connect cloud sync 
+## Enable password writeback in Azure AD Connect cloud sync 
 
 To use password writeback and enable the SSPR service to detect the cloud sync agent , you need to use the `Set-AADCloudSyncPasswordWritebackConfiguration` cmdlet and tenant’s global administrator credentials: 
 
@@ -109,7 +109,7 @@ To use password writeback and enable the SSPR service to detect the cloud sync a
    Set-AADCloudSyncPasswordWritebackConfiguration -Enable $true -Credential $(Get-Credential)
   ```
 
-For more information on using password writeback with Azure AD Connect cloud sync, see.
+For more information on using password writeback with Azure AD Connect cloud sync, see [Tutorial: Enable cloud sync self-service password reset writeback to an on-premises environment (preview)](../../active-directory/authentication/tutorial-enable-cloud-sync-sspr-writeback.md).
 
 
 ## Next steps 

articles/active-directory/cloud-sync/how-to-install.md

@@ -12,9 +12,9 @@ ms.author: joflore
 author: MicrosoftGuyJFlo
 manager: karenhoran
 ms.reviewer: calebb
+ms.collection: M365-identity-device-management
 
 #Customer intent: As an IT admin, I need to understand what a policy migration is in Conditional Access so that I can get rid of my classic policies.
-ms.collection: M365-identity-device-management
 ---
 # Conditional Access classic policy migration
 

articles/active-directory/conditional-access/policy-migration.md

@@ -10,9 +10,9 @@ ms.author: joflore
 author: MicrosoftGuyJFlo
 manager: karenhoran
 ms.reviewer: calebb
-#Customer intent: As an IT admin, I want to ensure that users have accepted my terms of use before accessing selected cloud apps, so that I have a consent from them.
 ms.collection: M365-identity-device-management
 ms.custom: mode-other
+#Customer intent: As an IT admin, I want to ensure that users have accepted my terms of use before accessing selected cloud apps, so that I have a consent from them.
 ---
 # Quickstart: Require terms of use to be accepted before accessing cloud apps
 

articles/active-directory/conditional-access/require-tou.md

@@ -12,9 +12,9 @@ ms.author: joflore
 author: MicrosoftGuyJFlo
 manager: karenhoran
 ms.reviewer: calebb
+ms.collection: M365-identity-device-management
 
 #Customer intent: As an IT admin, I need to understand what service dependencies are in Conditional Access so that I can assess how policies are applied
-ms.collection: M365-identity-device-management
 ---
 # What are service dependencies in Azure Active Directory Conditional Access?