Merge pull request #250127 from MicrosoftDocs/main

9/1/2023 AM Publish

Author: Taojunshen

.openpublishing.redirection.virtual-desktop.json

@@ -199,6 +199,11 @@
             "source_path_from_root": "/articles/virtual-desktop/windows-10-multisession-faq.yml",
             "redirect_url": "/azure/virtual-desktop/windows-multisession-faq",
             "redirect_document_id": true
+        },
+        {
+            "source_path_from_root": "/articles/virtual-desktop/install-client-per-user.md",
+            "redirect_url": "/azure/virtual-desktop/install-windows-client-per-user",
+            "redirect_document_id": true
         }
     ]
 }

articles/active-directory-b2c/whats-new-docs.md

@@ -1,7 +1,7 @@
 ---
 title: "What's new in Azure Active Directory business-to-customer (B2C)"
 description: "New and updated documentation for the Azure Active Directory business-to-customer (B2C)."
-ms.date: 08/01/2023
+ms.date: 09/01/2023
 ms.service: active-directory
 ms.subservice: B2C
 ms.topic: reference
@@ -15,6 +15,13 @@ manager: CelesteDG
 
 Welcome to what's new in Azure Active Directory B2C documentation. This article lists new docs that have been added and those that have had significant updates in the last three months. To learn what's new with the B2C service, see [What's new in Azure Active Directory](../active-directory/fundamentals/whats-new.md) and [Azure AD B2C developer release notes](custom-policy-developer-notes.md)
 
+## August 2023
+
+### Updated articles
+
+- [Page layout versions](page-layout.md) - Editorial updates
+- [Secure your API used an API connector in Azure AD B2C](secure-rest-api.md) - Oauth Bearer Authentication updated to GA
+
 ## June 2023
 
 ### New articles
@@ -52,10 +59,3 @@ Welcome to what's new in Azure Active Directory B2C documentation. This article
 - [Build a global identity solution with funnel-based approach](azure-ad-b2c-global-identity-funnel-based-design.md)
 - [Use the Azure portal to create and delete consumer users in Azure AD B2C](manage-users-portal.md)
 
-## April 2023
-
-### Updated articles
-
-- [Configure Transmit Security with Azure Active Directory B2C for passwordless authentication](partner-bindid.md) - Update partner-bindid.md
-- [Tutorial: Enable secure hybrid access for applications with Azure Active Directory B2C and F5 BIG-IP](partner-f5.md) - Update partner-f5.md
-

articles/active-directory/external-identities/customers/whats-new-docs.md

@@ -1,7 +1,7 @@
 ---
 title: "What's new in Azure Active Directory for customers"
 description: "New and updated documentation for the Azure Active Directory for customers documentation."
-ms.date: 08/17/2023
+ms.date: 09/01/2023
 ms.service: active-directory
 ms.subservice: ciam
 ms.topic: reference
@@ -15,6 +15,29 @@ manager: CelesteDG
 
 Welcome to what's new in Azure Active Directory for customers documentation. This article lists new docs that have been added and those that have had significant updates in the last three months. 
 
+## August 2023
+
+### New articles
+
+- [Quickstart: Get started with guide walkthrough](quickstart-get-started-guide.md)
+- [Tutorial: Add sign-in and sign-out to a Vanilla JavaScript single-page app for a customer tenant](tutorial-single-page-app-vanillajs-sign-in-sign-out.md)
+- [Sign in users in a sample Node.js CLI application.](sample-cli-app-node-sign-in-users.md)
+- [Tutorial: Prepare a Node.js CLI application for authentication](tutorial-cli-app-node-sign-in-prepare-app.md)
+- [Prepare your customer tenant to sign in users in a Node.js CLI application](tutorial-cli-app-node-sign-in-prepare-tenant.md)
+- [Authenticate users in a Node.js CLI application - Build app](tutorial-cli-app-node-sign-in-sign-out.md)
+- [Tutorial: Use role-based access control in your .NET MAUI](tutorial-desktop-maui-role-based-access-control.md)
+- [Tutorial: Use role-based access control in your .NET MAUI app](tutorial-mobile-maui-role-based-access-control.md)
+
+### Updated articles
+
+- [Collect user attributes during sign-up](how-to-define-custom-attributes.md) - Custom attribute update
+- [Quickstart: Create a tenant (preview)](quickstart-tenant-setup.md) - Get started guide update
+- [Add and manage admin accounts](how-to-manage-admin-accounts.md) - Editorial review
+- [Tutorial: Prepare a Vanilla JavaScript single-page app for authentication in a customer tenant](tutorial-single-page-app-vanillajs-prepare-app.md) - Editorial review
+- [Azure AD for customers documentation](index.yml) - Editorial review
+- [Tutorial: Sign in users in .NET MAUI app](tutorial-desktop-app-maui-sign-in-sign-out.md) - Add app roles to .NET MAUI app and receive them in the ID token
+- [Tutorial: Sign in users in .NET MAUI shell app](tutorial-mobile-app-maui-sign-in-sign-out.md) - Add app roles to .NET MAUI app and receive them in the ID token 
+
 ## July 2023
 
 ### New articles

articles/active-directory/external-identities/whats-new-docs.md

@@ -1,7 +1,7 @@
 ---
 title: "What's new in Azure Active Directory External Identities"
 description: "New and updated documentation for the Azure Active Directory External Identities."
-ms.date: 08/01/2023
+ms.date: 09/01/2023
 ms.service: active-directory
 ms.subservice: B2B
 ms.topic: reference
@@ -15,6 +15,16 @@ manager: CelesteDG
 
 Welcome to what's new in Azure Active Directory External Identities documentation. This article lists new docs that have been added and those that have had significant updates in the last three months. To learn what's new with the External Identities service, see [What's new in Azure Active Directory](../fundamentals/whats-new.md).
 
+## August 2023
+
+### Updated articles
+
+- [B2B collaboration user claims mapping in Azure Active Directory](claims-mapping.md) - UPN claims behavior update
+- [Self-service sign-up](self-service-sign-up-overview.md) - Customer content reference update 
+- [Cross-tenant access overview](cross-tenant-access-overview.md) - New storage model update
+- [Cross-tenant access settings](cross-tenant-access-settings-b2b-collaboration.md) - New storage model update
+- [Configure B2B direct connect](cross-tenant-access-settings-b2b-direct-connect.md) - New storage model update
+- 
 ## July 2023
 
 ### New article
@@ -38,15 +48,4 @@ Welcome to what's new in Azure Active Directory External Identities documentatio
 - [Set up tenant restrictions V2 (Preview)](tenant-restrictions-v2.md) - Microsoft Teams updates
 - [Invite guest users to an app](add-users-information-worker.md) - Link and structure updates
 
-## May 2023
-
-### New article
-
-- [Set up tenant restrictions V2 (Preview)](tenant-restrictions-v2.md)
-
-### Updated articles
-
-- [Overview: Cross-tenant access with Azure AD External Identities](cross-tenant-access-overview.md) - Graph API links updates
-- [Reset redemption status for a guest user](reset-redemption-status.md) - Screenshot updates
-
 

articles/active-directory/hybrid/install.md

@@ -31,6 +31,7 @@ Cloud sync uses the Azure AD Connect provisioning agent.  Use the steps below to
    >When installing for the US Government Cloud use:  
    >*AADConnectProvisioningAgentSetup.exe ENVIRONMENTNAME=AzureUSGovernment*  
    >See "[Install an agent in the US government cloud](cloud-sync/how-to-install.md#install-an-agent-in-the-us-government-cloud)" for more information.
+
  7. On the splash screen, select **I agree to the license and conditions**, and then select **Install**.
  8. Once the installation operation completes, the configuration wizard will launch. Select **Next** to start the configuration.
  9. On the **Select Extension** screen, select **HR-driven provisioning (Workday and SuccessFactors) / Azure AD Connect Cloud Sync** and click **Next**.

articles/active-directory/manage-apps/add-application-portal-assign-users.md

@@ -17,7 +17,7 @@ ms.custom: mode-other, enterprise-apps
 
 # Quickstart: Create and assign a user account
 
-In this quickstart, you use the Azure portal to create a user account in your Azure Active Directory (Azure AD) tenant. After you create the account, you can assign it to the enterprise application that you added to your tenant.
+In this quickstart, you use the Microsoft Entra admin center to create a user account in your Azure Active Directory (Azure AD) tenant. After you create the account, you can assign it to the enterprise application that you added to your tenant.
 
 It's recommended that you use a nonproduction environment to test the steps in this quickstart.
 
@@ -26,7 +26,7 @@ It's recommended that you use a nonproduction environment to test the steps in t
 To create a user account and assign it to an enterprise application, you need:
 
 - An Azure AD user account. If you don't already have one, you can [Create an account for free](https://azure.microsoft.com/free/?WT.mc_id=A261C142F).
-- One of the following roles: Global Administrator, or owner of the service principal.
+- One of the following roles: Global Administrator, Cloud Application Administrator, or owner of the service principal. You'll need the User Administrator role to manage users.
 - Completion of the steps in [Quickstart: Add an enterprise application](add-application-portal.md).
 
 ## Create a user account
@@ -35,23 +35,23 @@ To create a user account and assign it to an enterprise application, you need:
 
 To create a user account in your Azure AD tenant:
 
-1. Sign in to the [Azure portal](https://portal.azure.com) and sign in using one of the roles listed in the prerequisites.
-1. Browse to **Azure Active Directory** and select **Users**.
-1. Select **New user** at the top of the pane.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [User Administrator](../roles/permissions-reference.md#user-administrator).
+1. Browse to **Identity** > **Users** > **All users**
+1. Select **New user** at the top of the pane and then, select **Create new user**. 
 
     :::image type="content" source="media/add-application-portal-assign-users/new-user.png" alt-text="Add a new user account to your Azure AD tenant.":::
 
-1. In the **User name** field, enter the username of the user account. For example, `[email protected]`. Be sure to change `contoso.com` to the name of your tenant domain.
-1. In the **Name** field, enter the name of the user of the account. For example, `contosouser1`.
+1. In the **User principal name** field, enter the username of the user account. For example, `[email protected]`. Be sure to change `contoso.com` to the name of your tenant domain.
+1. In the **Display name** field, enter the name of the user of the account. For example, `contosouser1`.
 1. Enter the details required for the user under the **Groups and roles**, **Settings**, and **Job info** sections.
 1. Select **Create**.
 
 ## Assign a user account to an enterprise application
 
 To assign a user account to an enterprise application:
 
-1. Sign in to the [Azure portal](https://portal.azure.com), then browse to **Azure Active Directory** and select **Enterprise applications**.
-1. Search for and select the application to which you want to assign the user account. For example, the application that you created in the previous quickstart named **Azure AD SAML Toolkit 1**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Cloud Application Administrator](../roles/permissions-reference.md#cloud-application-administrator).
+1. Browse to **Identity** > **Applications** > **Enterprise applications** > **All applications**. For example, the application that you created in the previous quickstart named **Azure AD SAML Toolkit 1**.
 1. In the left pane, select **Users and groups**, and then select **Add user/group**.
 
     :::image type="content" source="media/add-application-portal-assign-users/assign-user.png" alt-text="Assign user account to an application in your Azure AD tenant.":::

articles/active-directory/manage-apps/configure-password-single-sign-on-non-gallery-applications.md

@@ -33,14 +33,14 @@ The configuration page for password-based SSO is simple. It includes only the UR
 
 To configure password-based SSO in your Azure AD tenant, you need:
 -	An Azure account with an active subscription. If you don't already have one, you can [create an account for free](https://azure.microsoft.com/free/?WT.mc_id=A261C142F)
--	Global Administrator, or owner of the service principal.
+-	Global Administrator, Cloud Application Administrator, or owner of the service principal.
 -	An application that supports password-based SSO.
 
 ## Configure password-based single sign-on
 
-1. Sign in to the [Azure portal](https://portal.azure.com) with the appropriate role.
-1. Select **Azure Active Directory** in Azure Services, and then select **Enterprise applications**.
-1. Search for and select the application that you want to add password-based SSO.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Cloud Application Administrator](../roles/permissions-reference.md#cloud-application-administrator). 
+1. Browse to **Identity** > **Applications** > **Enterprise applications** > **All applications**.
+1. Enter the name of the existing application in the search box, and then select the application from the search results.
 1. Select **Single sign-on** and then select **Password-based**.
 1. Enter the URL for the sign-in page of the application.
 1. Select **Save**. 

articles/active-directory/manage-apps/delete-application-portal.md

@@ -37,8 +37,9 @@ To delete an enterprise application, you need:
 
 :::zone pivot="portal"
 
-1. Sign in to the [Azure portal](https://portal.azure.com) and sign in using one of the roles listed in the prerequisites.
-1. In the left menu, select **Enterprise applications**. The **All applications** pane opens and displays a list of the applications in your Azure AD tenant. Search for and select the application that you want to delete. In this article, we use the **Azure AD SAML Toolkit 1** as an example.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Cloud Application Administrator](../roles/permissions-reference.md#cloud-application-administrator). 
+1. Browse to **Identity** > **Applications** > **Enterprise applications** > **All applications**.
+1. Enter the name of the existing application in the search box, and then select the application from the search results. In this article, we use the **Azure AD SAML Toolkit 1** as an example.
 1. In the **Manage** section of the left menu, select **Properties**.
 1. At the top of the **Properties** pane, select **Delete**, and then select **Yes** to confirm you want to delete the application from your Azure AD tenant.
 
@@ -57,7 +58,7 @@ To delete an enterprise application, you need:
     Import-Module AzureAD
     ```
 
-1. Connect to Azure AD PowerShell:
+1. Connect to Azure AD PowerShell and sign in as at least a [Cloud Application Administrator](../roles/permissions-reference.md#cloud-application-administrator):
 
    ```powershell
    Connect-AzureAD
@@ -77,7 +78,7 @@ To delete an enterprise application, you need:
 
 :::zone pivot="ms-powershell"
 
-1. Connect to Microsoft Graph PowerShell:
+1. Connect to Microsoft Graph PowerShell and sign in as at least a [Cloud Application Administrator](../roles/permissions-reference.md#cloud-application-administrator):
 
    ```powershell
    Connect-MgGraph -Scopes 'Application.Read.All'
@@ -101,7 +102,8 @@ To delete an enterprise application, you need:
 
 :::zone pivot="ms-graph"
 
-Delete an enterprise application using [Graph Explorer](https://developer.microsoft.com/graph/graph-explorer).
+To delete an enterprise application using [Graph Explorer](https://developer.microsoft.com/graph/graph-explorer), you need to sign in as at least a [Cloud Application Administrator](../roles/permissions-reference.md#cloud-application-administrator).
+
 1. To get the list of service principals in your tenant, run the following query.
 
    # [HTTP](#tab/http)