Merge remote-tracking branch 'refs/remotes/MicrosoftDocs/master' into nitinme-retire-services

Author: nitinme

.openpublishing.redirection.json

@@ -1,5 +1,120 @@
 {
   "redirections": [
+    {
+      "source_path": "articles/virtual-network/create-virtual-network-classic.md",
+      "redirect_url": "/previous-versions/azure/virtual-network/create-virtual-network-classic",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/virtual-network/virtual-networks-create-vnet-classic-pportal.md",
+      "redirect_url": "/previous-versions/azure/virtual-network/virtual-networks-create-vnet-classic-pportal",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/virtual-network/virtual-networks-create-vnet-classic-netcfg-ps.md",
+      "redirect_url": "/previous-versions/azure/virtual-network/virtual-networks-create-vnet-classic-netcfg-ps",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/virtual-network/virtual-networks-create-vnet-classic-cli.md",
+      "redirect_url": "/previous-versions/azure/virtual-network/virtual-networks-create-vnet-classic-cli",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/virtual-network/virtual-networks-specifying-a-dns-settings-in-a-virtual-network-configuration-file.md",
+      "redirect_url": "/previous-versions/azure/virtual-network/virtual-networks-specifying-a-dns-settings-in-a-virtual-network-configuration-file",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/virtual-network/virtual-networks-specifying-dns-settings-in-a-service-configuration-file.md",
+      "redirect_url": "/previous-versions/azure/virtual-network/virtual-networks-specifying-dns-settings-in-a-service-configuration-file",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/virtual-network/virtual-networks-using-network-configuration-file.md",
+      "redirect_url": "/previous-versions/azure/virtual-network/virtual-networks-using-network-configuration-file",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/virtual-network/virtual-networks-migrate-to-regional-vnet.md",
+      "redirect_url": "/previous-versions/azure/virtual-network/virtual-networks-migrate-to-regional-vnet",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/virtual-network/virtual-networks-create-nsg-classic-ps.md",
+      "redirect_url": "/previous-versions/azure/virtual-network/virtual-networks-create-nsg-classic-ps",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/virtual-network/virtual-networks-create-nsg-classic-cli.md",
+      "redirect_url": "/previous-versions/azure/virtual-network/virtual-networks-create-nsg-classic-cli",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/virtual-network/virtual-network-create-udr-classic-ps.md",
+      "redirect_url": "/previous-versions/azure/virtual-network/virtual-network-create-udr-classic-ps",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/virtual-network/virtual-network-create-udr-classic-cli.md",
+      "redirect_url": "/previous-versions/azure/virtual-network/virtual-network-create-udr-classic-cli",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/virtual-network/virtual-network-deploy-multinic-classic-ps.md",
+      "redirect_url": "/previous-versions/azure/virtual-network/virtual-network-deploy-multinic-classic-ps",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/virtual-network/virtual-network-deploy-multinic-classic-cli.md",
+      "redirect_url": "/previous-versions/azure/virtual-network/virtual-network-deploy-multinic-classic-cli",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/virtual-network/virtual-networks-reserved-public-ip.md",
+      "redirect_url": "/previous-versions/azure/virtual-network/virtual-networks-reserved-public-ip",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/virtual-network/virtual-networks-reserved-private-ip.md",
+      "redirect_url": "/previous-versions/azure/virtual-network/virtual-networks-reserved-private-ip",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/virtual-network/virtual-networks-static-private-ip-classic-cli.md",
+      "redirect_url": "/previous-versions/azure/virtual-network/virtual-networks-static-private-ip-classic-cli",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/virtual-network/virtual-networks-instance-level-public-ip.md",
+      "redirect_url": "/previous-versions/azure/virtual-network/virtual-networks-instance-level-public-ip",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/virtual-network/virtual-networks-acl-powershell.md",
+      "redirect_url": "/previous-versions/azure/virtual-network/virtual-networks-acl-powershell",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/virtual-network/virtual-networks-move-vm-role-to-subnet.md",
+      "redirect_url": "/previous-versions/azure/virtual-network/virtual-networks-move-vm-role-to-subnet",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/virtual-network/virtual-networks-sample-app.md",
+      "redirect_url": "/previous-versions/azure/virtual-network/virtual-networks-sample-app",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/virtual-network/virtual-network-ip-addresses-overview-classic.md",
+      "redirect_url": "/previous-versions/azure/virtual-network/virtual-network-ip-addresses-overview-classic",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/virtual-network/virtual-networks-acl.md",
+      "redirect_url": "/previous-versions/azure/virtual-network/virtual-networks-acl",
+      "redirect_document_id": false
+    },
     {
       "source_path": "articles/power-bi-workspace-collections/app-token-flow.md",
       "redirect_url": "/previous-versions/azure/power-bi-workspace-collections/app-token-flow",
@@ -14847,6 +14962,16 @@
       "redirect_url": "/azure/machine-learning/tutorial-train-models-with-aml",
       "redirect_document_id": true
     },
+    {
+      "source_path": "articles/machine-learning/how-to-ui-sample-regression-predict-automobile-price-basic.md",
+      "redirect_url": "/azure/machine-learning/how-to-designer-sample-regression-automobile-price-basic",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/machine-learning/machine-learning/how-to-ui-sample-classification-predict-flight-delay.md",
+      "redirect_url": "/azure/machine-learning/how-to-designer-sample-classification-flight-delay",
+      "redirect_document_id": false
+    },
     {
       "source_path": "articles/log-analytics/log-analytics-add-solutions.md",
       "redirect_url": "/azure/monitoring/monitoring-solutions",
@@ -47189,6 +47314,31 @@
       "source_path": "articles/mysql/concepts-aad-authentication.md",
       "redirect_url": "/azure/mysql/concepts-azure-ad-authentication",
       "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/load-balancer/quickstart-create-basic-load-balancer-portal.md",
+      "redirect_url": "/azure/load-balancer/quickstart-load-balancer-standard-public-portal",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/load-balancer/quickstart-create-basic-load-balancer-cli.md",
+      "redirect_url": "/azure/load-balancer/quickstart-load-balancer-standard-public-cli",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/load-balancer/quickstart-create-basic-load-balancer-powershell.md",
+      "redirect_url": "articles/load-balancer/quickstart-load-balancer-standard-public-powershell",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/load-balancer/load-balancer-get-started-internet-arm-template.md",
+      "redirect_url": "/azure/load-balancer/quickstart-load-balancer-standard-public-template",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/load-balancer/create-load-balancer-rest-api.md",
+      "redirect_url": "/rest/api/load-balancer/loadbalancers/createorupdate",
+      "redirect_document_id": false
     }
   ]
 }

articles/active-directory/develop/howto-add-app-roles-in-azure-ad-apps.md

@@ -40,7 +40,7 @@ These application roles are defined in the [Azure portal](https://portal.azure.c
 1. Edit the app manifest by locating the `appRoles` setting and adding all your Application Roles.
 
      > [!NOTE]
-     > Each app role definition in this manifest must have a different valid GUID for the `id` property. 
+     > Each app role definition in this manifest must have a different valid GUID within the context of the manifest for the `id` property.    
      > 
      > The `value` property of each app role definition should exactly match the strings that are used in the code in the application. The `value` property can't contain spaces. If it does, you'll receive an error when you save the manifest.
      

articles/active-directory/develop/scenario-desktop-acquire-token.md

@@ -410,7 +410,7 @@ To sign in a domain user on a domain or Azure AD joined machine, use Integrated
 
 - The authority passed in `PublicClientApplicationBuilder` needs to be:
   - Tenanted of the form `https://login.microsoftonline.com/{tenant}/`, where `tenant` is either the GUID that represents the tenant ID or a domain associated with the tenant.
-  - For any [work and school accounts](`https://login.microsoftonline.com/organizations/`).
+  - For any work and school accounts: `https://login.microsoftonline.com/organizations/`.
   - Microsoft personal accounts aren't supported. You can't use /common or /consumers tenants.
 
 - Because Integrated Windows Authentication is a silent flow:

articles/active-directory/hybrid/how-to-connect-password-hash-synchronization.md

@@ -125,9 +125,9 @@ It is typical to force a user to change their password during their first logon,
 
 The temporary password functionality helps to ensure that the transfer of ownership of the credential is completed on first use, to minimize the duration of time in which more than one individual has knowledge of that credential.
 
-To support temporary passwords in Azure AD for synchronized users, you can enable the *ForcePasswordResetOnLogonFeature* feature, by running the following command on your Azure AD Connect server:
+To support temporary passwords in Azure AD for synchronized users, you can enable the *ForcePasswordChangeOnLogOn* feature, by running the following command on your Azure AD Connect server:
 
-`Set-ADSyncAADCompanyFeature  -ForcePasswordResetOnLogonFeature $true`
+`Set-ADSyncAADCompanyFeature  -ForcePasswordChangeOnLogOn $true`
 
 > [!NOTE]
 > Forcing a user to change their password on next logon requires a password change at the same time.  AD Connect will not pick up the force password change flag by itself; it is supplemental to the detected password change that occurs during password hash sync.

articles/active-directory/manage-apps/define-conditional-rules-for-provisioning-user-accounts.md

@@ -89,7 +89,12 @@ Scoping filters are configured as part of the attribute mappings for each Azure
    g. **REGEX MATCH**. Clause returns "true" if the evaluated attribute matches a regular expression pattern. For example: ([1-9][0-9]) matches any number between 10 and 99.
 
    h. **NOT REGEX MATCH**. Clause returns "true" if the evaluated attribute doesn't match a regular expression pattern.
- 
+   
+   i. **Greater_Than.** Clause returns "true" if the evaluated attribute is greater than the value. The value specified on the scoping filter must be an integer and the attribute on the user must be an integer [0,1,2,...]. 
+   
+   j. **Greater_Than_OR_EQUALS.** Clause returns "true" if the evaluated attribute is greater than or equal to the value. The value specified on the scoping filter must be an integer and the attribute on the user must be an integer [0,1,2,...]. 
+
+
 >[!IMPORTANT] 
 > The Includes and IsMemberOf filters are not supported. They will soon be removed from the UI.
 

articles/active-directory/manage-apps/use-scim-to-provision-users-and-groups.md

@@ -1377,6 +1377,8 @@ The SCIM spec does not define a SCIM-specific scheme for authentication and auth
 *  Client ID: The authorization server issues the registered client a client identifier, which is a unique string representing the registration information provided by the client.  The client identifier is not a secret; it is exposed to the resource owner and **must not** be used alone for client authentication.  
 *  Client secret: The client secret is a secret generated by the authorization server. It should be a unique value known only to the authorization server. 
 
+Note that OAuth v1 is not supported due to exposure of the client secret. OAuth v2 is supported.  
+
 Best practices (recommended but not required):
 * Support multiple redirect URLs. Administrators can configure provisioning from both "portal.azure.com" and "aad.portal.azure.com". Supporting multiple redirect URLs will ensure that users can authorize access from either portal.
 * Support multiple secrets to ensure smooth secret renewal, without downtime. 

articles/active-directory/manage-apps/user-provisioning.md

@@ -62,7 +62,7 @@ Azure AD features pre-integrated support for many popular SaaS apps and human re
 
 * **Applications that support SCIM 2.0**. For information on how to generically connect applications that implement SCIM 2.0-based user management APIs, see [Build a SCIM endpoint and configure user provisioning](use-scim-to-provision-users-and-groups.md).
 
-## What is SCIM?
+## What is System for Cross-domain Identity Management (SCIM)?
 
 To help automate provisioning and deprovisioning, apps expose proprietary user and group APIs. However, anyone who’s tried to manage users in more than one app will tell you that every app tries to perform the same simple actions, such as creating or updating users, adding users to groups, or deprovisioning users. Yet, all these simple actions are implemented just a little bit differently, using different endpoint paths, different methods to specify user information, and a different schema to represent each element of information.
 

articles/active-directory/saas-apps/gigya-tutorial.md

@@ -108,7 +108,7 @@ To configure Azure AD single sign-on with Gigya, perform the following steps:
     `https://fidm.gigya.com/saml/v2.0/<companyname>`
 
 	> [!NOTE]
-	> These values are not real. Update these values with the actual Sign on URL and Identifier. Contact [Gigya Client support team](https://www.gigya.com/support-policy/) to get these values. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Azure portal.
+	> These values are not real. Update these values with the actual Sign on URL and Identifier. Contact [Gigya Client support team](https://developers.gigya.com/display/GD/Opening+A+Support+Incident) to get these values. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Azure portal.
 
 5. On the **Set up Single Sign-On with SAML** page, in the **SAML Signing Certificate** section, click **Download** to download the **Certificate (Base64)** from the given options as per your requirement and save it on your computer.
 

articles/active-directory/saas-apps/google-apps-provisioning-tutorial.md

@@ -205,6 +205,7 @@ For more information on how to read the Azure AD provisioning logs, see [Reporti
 
 ## Common issues
 * Authorization failures can occur when the account used to establish a connection is not for an administrator in GSuite. Ensure that the account used to authorize access has admin permissions over **all domains** that users need to be provisioned with. 
+* Azure AD supports disabling users in GSuite so that they cannot access the application, but it does not delete users in GSuite.
 
 ## Next steps
 

articles/active-directory/users-groups-roles/groups-dynamic-membership.md

@@ -365,7 +365,7 @@ You can also create a rule that selects device objects for membership in a group
 > [!NOTE]
 > systemlabels is a read-only attribute that cannot be set with Intune.
 >
-> For Windows 10, the correct format of the deviceOSVersion attribute is as follows: (device.deviceOSVersion -eq "10.0 (17763)"). The formatting can be validated with the Get-MsolDevice PowerShell cmdlet.
+> For Windows 10, the correct format of the deviceOSVersion attribute is as follows: (device.deviceOSVersion -eq "10.0.17763"). The formatting can be validated with the Get-MsolDevice PowerShell cmdlet.
 
 The following device attributes can be used.