Merge branch 'main' of https://github.com/MicrosoftDocs/azure-docs-pr into heidist-refresh

Author: HeidiSteen

articles/active-directory/app-provisioning/application-provisioning-log-analytics.md

@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.subservice: app-provisioning
 ms.topic: conceptual
 ms.workload: identity
-ms.date: 04/25/2023
+ms.date: 04/26/2023
 ms.author: kenwith
 ms.reviewer: arvinh
 ---

articles/active-directory/app-provisioning/expression-builder.md

@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.subservice: app-provisioning
 ms.topic: conceptual
 ms.workload: identity
-ms.date: 10/20/2022
+ms.date: 04/26/2023
 ms.author: kenwith
 ms.reviewer: arvinh
 ---
@@ -31,13 +31,13 @@ In application provisioning, you use expressions for attribute mappings. You acc
 
 To use expression builder, select a function and attribute and then enter a suffix if needed. Then select **Add expression** to add the expression to the code box. To learn more about the functions available and how to use them, see [Reference for writing expressions for attribute mappings](functions-for-customizing-application-data.md).
 
-Test the expression by searching for a user or providing values and selecting **Test expression**. The output of the expression test will appear in the **View expression output** box.
+Test the expression by searching for a user or providing values and selecting **Test expression**. The output of the expression test appears in the **View expression output** box.
 
 When you're satisfied with the expression, move it to an attribute mapping. Copy and paste it into the expression box for the attribute mapping you're working on.
 
 ## Known limitations
-* Extension attributes are not available for selection in the expression builder. However, extension attributes can be used in the attribute mapping expression. 
+* Extension attributes aren't available for selection in the expression builder. However, extension attributes can be used in the attribute mapping expression. 
 
 ## Next steps
 
-[Reference for writing expressions for attribute mappings](functions-for-customizing-application-data.md)
+[Reference for writing expressions for attribute mappings](functions-for-customizing-application-data.md)

articles/active-directory/app-provisioning/sap-successfactors-attribute-reference.md

@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.subservice: app-provisioning
 ms.topic: reference
 ms.workload: identity
-ms.date: 10/20/2022
+ms.date: 04/26/2023
 ms.author: kenwith
 ms.reviewer: chmutali
 ---
@@ -27,7 +27,7 @@ The table below captures the list of SuccessFactors attributes included by defau
 - [SuccessFactors to Active Directory User Provisioning](../saas-apps/sap-successfactors-inbound-provisioning-tutorial.md)
 - [SuccessFactors to Azure AD User Provisioning](../saas-apps/sap-successfactors-inbound-provisioning-cloud-only-tutorial.md)
 
-Please refer to the [SAP SuccessFactors integration reference](./sap-successfactors-integration-reference.md#retrieving-additional-attributes) to extend the schema for additional attributes. 
+Please refer to the [SAP SuccessFactors integration reference](./sap-successfactors-integration-reference.md#retrieving-more-attributes) to extend the schema for additional attributes. 
 
 | \# | SuccessFactors Entity                  | SuccessFactors Attribute     | Operation Type |
 |----|----------------------------------------|------------------------------|----------------|

articles/active-directory/app-provisioning/sap-successfactors-integration-reference.md

@@ -6,7 +6,7 @@ services: active-directory
 ms.service: active-directory
 ms.subservice: authentication
 ms.topic: conceptual
-ms.date: 03/15/2023
+ms.date: 04/25/2023
 
 ms.author: justinha
 author: sabina-smith
@@ -30,6 +30,10 @@ Users receive a notification in Outlook mobile to approve or deny sign-in, or th
 ## Prerequisites
 
 - Your organization needs to enable Microsoft Authenticator (second factor) push notifications for some users or groups by using the Authentication methods policy. You can edit the Authentication methods policy by using the Azure portal or Microsoft Graph API.
+
+  >[!TIP]
+  >We recommend that you also enable [system-preferred multifactor authentication (MFA)](concept-system-preferred-multifactor-authentication.md) when you enable Authenticator Lite. With system-preferred MFA enabled, users try to sign-in with Authenticator Lite before they try less secure telephony methods like SMS or voice call. 
+
 - If your organization is using the Active Directory Federation Services (AD FS) adapter or Network Policy Server (NPS) extensions, upgrade to the latest versions for a consistent experience.
 - Users enabled for shared device mode on Outlook mobile aren't eligible for Authenticator Lite.
 - Users must run a minimum Outlook mobile version.
@@ -125,7 +129,7 @@ If enabled for Authenticator Lite, users are prompted to register their account
 :::image type="content" border="true" source="./media/how-to-mfa-authenticator-lite/registration.png" alt-text="Screenshot of how to register Authenticator Lite.":::
 
 >[!NOTE]
->Users with no MFA methods registered will be prompted to download the Authenticator App when they begin registration flow. For the most seamless Authenticator Lite registration experience, [provision your users a TAP](https://learn.microsoft.com/azure/active-directory/authentication/howto-authentication-temporary-access-pass) (temporary access pass) which they can use during registration.
+>If they don't have any MFA methods registered, users are prompted to download Authenticator when they begin the registration flow. For the most seamless experience, provision users with a [Temporary Access Pass (TAP)](howto-authentication-temporary-access-pass.md) that they can use during Authenticator Lite registration.
 
 
 ## Monitoring Authenticator Lite usage

articles/active-directory/authentication/how-to-mfa-authenticator-lite.md

@@ -6,7 +6,7 @@ services: active-directory
 ms.service: active-directory
 ms.subservice: authentication
 ms.topic: how-to
-ms.date: 01/29/2023
+ms.date: 04/26/2023
 
 ms.author: justinha
 author: justinha
@@ -82,45 +82,46 @@ The following fields can be set through PowerShell:
 > [!IMPORTANT]
 > Azure AD PowerShell is planned for deprecation. You can start using [Microsoft Graph PowerShell](/powershell/microsoftgraph/overview) to interact with Azure AD as you would in Azure AD PowerShell, or use the [Microsoft Graph REST API for managing authentication methods](/graph/api/resources/authenticationmethods-overview).
 
-### Use Azure AD PowerShell version 1
+### Use Microsoft Graph PowerShell
 
-To get started, [download and install the Azure AD PowerShell module](/previous-versions/azure/jj151815(v=azure.100)#bkmk_installmodule). After it's installed, use the following steps to configure each field.
+To get started, [download and install the Microsoft Graph PowerShell module](/powershell/microsoftgraph/overview).
 
-#### Set the authentication data with Azure AD PowerShell version 1
+To quickly install from recent versions of PowerShell that support `Install-Module`, run the following commands. The first line checks to see if the module is already installed:
 
 ```PowerShell
-Connect-MsolService
-
-Set-MsolUser -UserPrincipalName [email protected] -AlternateEmailAddresses @("[email protected]")
-Set-MsolUser -UserPrincipalName [email protected] -MobilePhone "+1 4251234567"
-Set-MsolUser -UserPrincipalName [email protected] -PhoneNumber "+1 4252345678"
-
-Set-MsolUser -UserPrincipalName [email protected] -AlternateEmailAddresses @("[email protected]") -MobilePhone "+1 4251234567" -PhoneNumber "+1 4252345678"
+Get-Module Microsoft.Graph
+Install-Module Microsoft.Graph
+Select-MgProfile -Name "beta"
+Connect-MgGraph -Scopes "User.ReadWrite.All"
 ```
 
-#### Read the authentication data with Azure AD PowerShell version 1
+After the module is installed, use the following steps to configure each field.
+
+#### Set the authentication data with Microsoft Graph PowerShell
 
 ```PowerShell
-Connect-MsolService
+Connect-MgGraph -Scopes "User.ReadWrite.All"
 
-Get-MsolUser -UserPrincipalName [email protected] | select AlternateEmailAddresses
-Get-MsolUser -UserPrincipalName [email protected] | select MobilePhone
-Get-MsolUser -UserPrincipalName [email protected] | select PhoneNumber
+Update-MgUser -UserId '[email protected]' -otherMails @("[email protected]")
+Update-MgUser -UserId '[email protected]' -mobilePhone "+1 4251234567"
+Update-MgUser -UserId '[email protected]' -businessPhones "+1 4252345678"
 
-Get-MsolUser | select DisplayName,UserPrincipalName,AlternateEmailAddresses,MobilePhone,PhoneNumber | Format-Table
+Update-MgUser -UserId '[email protected]' -otherMails @("[email protected]") -mobilePhone "+1 4251234567" -businessPhones "+1 4252345678"
 ```
 
-#### Read the Authentication Phone and Authentication Email options
-
-To read the **Authentication Phone** and **Authentication Email** when you use PowerShell version 1, use the following commands:
+#### Read the authentication data with Microsoft Graph PowerShell
 
 ```PowerShell
-Connect-MsolService
-Get-MsolUser -UserPrincipalName [email protected] | select -Expand StrongAuthenticationUserDetails | select PhoneNumber
-Get-MsolUser -UserPrincipalName [email protected] | select -Expand StrongAuthenticationUserDetails | select Email
+Connect-MgGraph -Scopes "User.Read.All"
+
+Get-MgUser -UserId '[email protected]' | select otherMails
+Get-MgUser -UserId '[email protected]' | select mobilePhone
+Get-MgUser -UserId '[email protected]' | select businessPhones
+
+Get-MgUser -UserId '[email protected]' | Select businessPhones, mobilePhone, otherMails | Format-Table
 ```
 
-### Use Azure AD PowerShell version 2
+### Use Azure AD PowerShell
 
 To get started, [download and install the Azure AD version 2 PowerShell module](/powershell/module/azuread/).
 
@@ -158,45 +159,6 @@ Get-AzureADUser -ObjectID [email protected] | select TelephoneNumber
 Get-AzureADUser | select DisplayName,UserPrincipalName,otherMails,Mobile,TelephoneNumber | Format-Table
 ```
 
-### Use Microsoft Graph PowerShell
-
-To get started, [download and install the Microsoft Graph PowerShell module](/powershell/microsoftgraph/overview).
-
-To quickly install from recent versions of PowerShell that support `Install-Module`, run the following commands. The first line checks to see if the module is already installed:
-
-```PowerShell
-Get-Module Microsoft.Graph
-Install-Module Microsoft.Graph
-Select-MgProfile -Name "beta"
-Connect-MgGraph -Scopes "User.ReadWrite.All"
-```
-
-After the module is installed, use the following steps to configure each field.
-
-#### Set the authentication data with Microsoft Graph PowerShell
-
-```PowerShell
-Connect-MgGraph -Scopes "User.ReadWrite.All"
-
-Update-MgUser -UserId '[email protected]' -otherMails @("[email protected]")
-Update-MgUser -UserId '[email protected]' -mobilePhone "+1 4251234567"
-Update-MgUser -UserId '[email protected]' -businessPhones "+1 4252345678"
-
-Update-MgUser -UserId '[email protected]' -otherMails @("[email protected]") -mobilePhone "+1 4251234567" -businessPhones "+1 4252345678"
-```
-
-#### Read the authentication data with Microsoft Graph PowerShell
-
-```PowerShell
-Connect-MgGraph -Scopes "User.Read.All"
-
-Get-MgUser -UserId '[email protected]' | select otherMails
-Get-MgUser -UserId '[email protected]' | select mobilePhone
-Get-MgUser -UserId '[email protected]' | select businessPhones
-
-Get-MgUser -UserId '[email protected]' | Select businessPhones, mobilePhone, otherMails | Format-Table
-```
-
 ## Next steps
 
 Once authentication contact information is pre-populated for users, complete the following tutorial to enable self-service password reset:

articles/active-directory/authentication/howto-sspr-authenticationdata.md

@@ -32,6 +32,8 @@ Adding custom branding requires one of the following licenses:
 - Azure AD Premium 2
 - Office 365 (for Office apps)
 
+At least one of the previously listed licenses is sufficient to add and manage the company branding in your tenant.
+
 Azure AD Premium editions are available for customers in China using the worldwide instance of Azure AD. Azure AD Premium editions aren't currently supported in the Azure service operated by 21Vianet in China. For more information about licensing and editions, see [Sign up for Azure AD Premium](active-directory-get-started-premium.md).
 
 The **Global Administrator** role is required to customize company branding.

articles/active-directory/fundamentals/customize-branding.md

@@ -0,0 +1,45 @@
+---
+title: Improve reliability of your business-critical applications using Azure Advisor.
+description: Use Azure Advisor to evaluate the reliability posture of your business-critical applications, assess risks and plan improvements.
+ms.topic: article
+ms.date: 04/25/2023
+
+---
+
+# Improve the reliability of your business-critical applications using Azure Advisor
+
+Azure Advisor helps you assess and improve the reliability of your business-critical applications. 
+
+## Reliability recommendations
+
+You can get reliability recommendations on the **Reliability** tab on the Advisor dashboard.
+
+1. Sign in to the [**Azure portal**](https://portal.azure.com).
+
+1. Search for and select [**Advisor**](https://aka.ms/azureadvisordashboard) from any page.
+
+1. On the **Advisor** dashboard, select the **Reliability** tab.
+
+## Reliability workbook
+
+You can evaluate the reliability of posture of your applications, assess risks and plan improvements using the new Reliability workbook template, which is available in Azure Advisor.
+
+1. Sign in to the [**Azure portal**](https://portal.azure.com).
+
+1. Search for and select [**Advisor**](https://aka.ms/azureadvisordashboard) from any page.
+
+1. Select **Workbooks** item in the left menu. 
+
+1. Open **Reliability** workbook template. 
+
+:::image type="content" source="media/advisor-reliability-workbook.png#lightbox" alt-text="Screenshot of the Azure Advisor reliability workbook template.":::
+
+
+## Next steps
+
+For more information about Advisor recommendations, see:
+* [Reliability recommendations](advisor-reference-reliability-recommendations.md)
+* [Introduction to Advisor](advisor-overview.md)
+* [Get started with Advisor](advisor-get-started.md)
+
+

articles/advisor/advisor-how-to-improve-reliability.md

@@ -46,6 +46,8 @@
     href: advisor-cost-recommendations.md
   - name: Improve security
     href: advisor-security-recommendations.md
+  - name: Improve reliability  
+    href: advisor-how-to-improve-reliability.md
   - name: Improve the performance of highly used VMs
     href: advisor-how-to-performance-resize-high-usage-vm-recommendations.md
   - name: Use tags to filter recommendations and score