Merge pull request #49510 from barbkess/app-proxy2

Identity VSTS 527269 - HTTP only cookies

Author: PRMerger14

articles/active-directory/manage-apps/application-proxy-publish-azure-portal.md

@@ -2,19 +2,15 @@
 title: Publish apps with Azure AD Application Proxy | Microsoft Docs
 description: Publish on-premises applications to the cloud with Azure AD Application Proxy in the Azure portal.
 services: active-directory
-documentationcenter: ''
 author: barbkess
 manager: mtillman
-
 ms.service: active-directory
 ms.component: app-mgmt
 ms.workload: identity
-ms.tgt_pltfrm: na
-ms.devlang: na
 ms.topic: conceptual
-ms.date: 05/24/2018
+ms.date: 08/20/2018
 ms.author: barbkess
-ms.reviewer: harshja
+ms.reviewer: japere
 ms.custom: it-pro
 ---
 
@@ -69,6 +65,7 @@ Follow these steps to publish your apps with Application Proxy. If you haven't a
    ![Configure your application](./media/application-proxy-publish-azure-portal/configure-app.png)
 5. If necessary, configure additional settings. For most applications, you should keep these settings in their default states. 
    - **Backend Application Timeout**: Set this value to **Long** only if your application is slow to authenticate and connect. 
+   - **Use HTTP-Only Cookie**: Set this value to **Yes** to have Application Proxy cookies include the HTTPOnly flag in the HTTP response header.
    - **Translate URLs in Headers**: Keep this value as **Yes** unless your application required the original host header in the authentication request.
    - **Translate URLs in Application Body**: Keep this value as **No** unless you have hardcoded HTML links to other on-premises applications, and don't use custom domains. For more information, see [Link translation with Application Proxy](application-proxy-configure-hard-coded-link-translation.md).