Merge pull request #90180 from KingdomOfEnds/dt-aad

improved aad api search

Author: v-albemi

articles/digital-twins/how-to-configure-postman.md

@@ -6,7 +6,7 @@ manager: alinast
 ms.service: digital-twins
 services: digital-twins
 ms.topic: conceptual
-ms.date: 08/21/2019
+ms.date: 09/30/2019
 ms.author: v-adgera
 ---
 
@@ -30,11 +30,29 @@ Through the Postman client, solutions developers can specify the kind of HTTP re
 
 Configure your Azure Active Directory app to use the OAuth 2.0 implicit grant flow.
 
-1. Follow the steps in [our quickstart](./quickstart-view-occupancy-dotnet.md) to create an Azure AD application. Or, create a [native app using the legacy AAD blade](./how-to-use-legacy-aad.md).
+1. Open the **API permissions** pane for your app registration. Select **Add a permission** button. In the **Request API permissions** pane, select the **APIs my organization uses** tab, and then search for:
+    
+    1. `Azure Digital Twins`. Select the **Azure Digital Twins** API.
 
-1. Under **API permissions**, select **Add a permission**. Then, **Azure Digital Twins** under **APIs my organization uses**. If your search doesn't locate the API, search for **Azure Smart Spaces** instead. Then, select **Delegated Permissions**, **Read** > **Read.Write**, and **Add permission**.
+        [![Search API or Azure Digital Twins](../../includes/media/digital-twins-permissions/aad-aap-search-api-dt.png)](../../includes/media/digital-twins-permissions/aad-aap-search-api-dt.png#lightbox)
+
+    1. Alternatively, search for `Azure Smart Spaces Service`. Select the **Azure Smart Spaces Service** API.
+
+        [![Search API for Azure Smart Spaces](../../includes/media/digital-twins-permissions/aad-app-search-api.png)](../../includes/media/digital-twins-permissions/aad-app-search-api.png#lightbox)
+
+    > [!IMPORTANT]
+    > The Azure AD API name and ID that will appear depends on your tenant:
+    > * Test tenant and customer accounts should search for `Azure Digital Twins`.
+    > * Other Microsoft accounts should search for `Azure Smart Spaces Service`.
+
+1. The selected API shows up as **Azure Digital Twins** in the same **Request API permissions** pane. Select the **Read (1)** drop down, and then select **Read.Write** checkbox. Select the **Add permissions** button.
+
+    [![Add API permissions](../../includes/media/digital-twins-permissions/aad-app-req-permissions.png)](../../includes/media/digital-twins-permissions/aad-app-req-permissions.png#lightbox)
+
+1. Depending on your organization's settings, you might need to take additional steps to grant admin access to this API. Contact your administrator for more information. Once the admin access is approved, the **ADMIN CONSENT REQUIRED** column in the **API permissions** pane will show similar to the following for your APIs:
+
+    [![Add API permissions](../../includes/media/digital-twins-permissions/aad-app-admin-consent.png)](../../includes/media/digital-twins-permissions/aad-app-admin-consent.png#lightbox)
 
-    [![Azure Active Directory app registrations add api](../../includes/media/digital-twins-permissions/aad-app-req-permissions.png)](../../includes/media/digital-twins-permissions/aad-app-req-permissions.png#lightbox)
 
 1. Select **Manifest** to open the application manifest for your app. Set *oauth2AllowImplicitFlow* to `true`.
 
@@ -46,6 +64,9 @@ Configure your Azure Active Directory app to use the OAuth 2.0 implicit grant fl
 
 1. Copy and keep the **Application ID** of your Azure Active Directory app. It's used in the steps that follow.
 
+   [![Azure Active Directory application ID](../../includes/media/digital-twins-permissions/aad-app-reg-app-id.png)](../../includes/media//digital-twins-permissions/aad-app-reg-app-id.png#lightbox)
+
+
 ## Obtain an OAuth 2.0 token
 
 [!INCLUDE [digital-twins-management-api](../../includes/digital-twins-management-api.md)]
@@ -69,7 +90,7 @@ Set up and configure Postman to obtain an Azure Active Directory token. Afterwar
     |---------|---------|
     | Grant Type | `Implicit` |
     | Callback URL | `https://www.getpostman.com/oauth2/callback` |
-    | Auth URL | Use the **Authorization URL** from step 2 |
+    | Auth URL | Use the **Authorization URL** from **step 2** |
     | Client ID | Use the **Application ID** for the Azure Active Directory app that was created or reused from the previous section |
     | Scope | Leave blank |
     | State | Leave blank |
@@ -87,8 +108,6 @@ Set up and configure Postman to obtain an Azure Active Directory token. Afterwar
   
 1. Scroll down, and select **Use Token**.
 
-<div id="multi"></div>
-
 ## Make a multipart POST request
 
 After completing the previous steps, configure Postman to make an authenticated HTTP multipart POST request:

articles/digital-twins/media/how-to-configure-postman/postman-oauth-token.png

@@ -5,7 +5,7 @@
  author: dsk-2015
  ms.service: digital-twins
  ms.topic: include
- ms.date: 09/24/2019
+ ms.date: 09/30/2019
  ms.author: dkshir
  ms.custom: include file
 ---
@@ -34,16 +34,18 @@
 
 1. Open the **API permissions** pane for your app registration. Select **Add a permission** button. In the **Request API permissions** pane, select the **APIs my organization uses** tab, and then search for:
 
-    1. **Azure Digital Twins**. Select the **Azure Digital Twins** API.
+    1. `Azure Digital Twins`. Select the **Azure Digital Twins** API.
 
         [![Search API or Azure Digital Twins](./media/digital-twins-permissions/aad-aap-search-api-dt.png)](./media/digital-twins-permissions/aad-aap-search-api-dt.png#lightbox)
 
-    1. Alternatively, search for **Azure Smart Spaces**. Select the **Azure Smart Spaces Service** API.
+    1. Alternatively, search for `Azure Smart Spaces Service`. Select the **Azure Smart Spaces Service** API.
 
         [![Search API for Azure Smart Spaces](./media/digital-twins-permissions/aad-app-search-api.png)](./media/digital-twins-permissions/aad-app-search-api.png#lightbox)
 
-    > [!NOTE]
-    > The exact name that will appear when searched may vary depending on which Azure tenant you belong to.
+    > [!IMPORTANT]
+    > The Azure AD API name and ID that will appear depends on your tenant:
+    > * Test tenant and customer accounts should search for `Azure Digital Twins`.
+    > * Other Microsoft accounts should search for `Azure Smart Spaces Service`.
 
 1. The selected API shows up as **Azure Digital Twins** in the same **Request API permissions** pane. Select the **Read (1)** drop down, and then select **Read.Write** checkbox. Select the **Add permissions** button.