changed files by pdets auto publish service, publishid[a39b4919-72d9-4485-8c2f-0596d944e80a] and do [publish].

wwlpublish · web-flow · commit 0def15b1147f · 2025-04-16T13:42:37.000+08:00
diff --git a/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/1-introduction.yml b/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/1-introduction.yml
@@ -1,12 +1,12 @@
 ### YamlMime:ModuleUnit
-uid: learn-pr/wwl-sci/manage-azure-active-directory-identity-protection.introduction
+uid: learn.wwl.manage-azure-active-directory-identity-protection.introduction
 title: Introduction
 metadata:
   adobe-target: true
   prefetch-feature-rollout: true
   title: Introduction
   description: "Introduction"
-  ms.date: 04/15/2025
+  ms.date: 04/16/2025
   author: wwlpublish
   ms.author: roberts
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/10-summary-resources.yml b/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/10-summary-resources.yml
@@ -1,12 +1,12 @@
 ### YamlMime:ModuleUnit
-uid: learn-pr/wwl-sci/manage-azure-active-directory-identity-protection.summary-resources
+uid: learn.wwl.manage-azure-active-directory-identity-protection.summary-resources
 title: Summary and resources
 metadata:
   adobe-target: true
   prefetch-feature-rollout: true
   title: Summary and resources
   description: "Summary and resources"
-  ms.date: 04/15/2025
+  ms.date: 04/16/2025
   author: wwlpublish
   ms.author: roberts
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/2-review-identity-protection-basics.yml b/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/2-review-identity-protection-basics.yml
@@ -1,12 +1,12 @@
 ### YamlMime:ModuleUnit
-uid: learn-pr/wwl-sci/manage-azure-active-directory-identity-protection.review-identity-protection-basics
+uid: learn.wwl.manage-azure-active-directory-identity-protection.review-identity-protection-basics
 title: Review identity protection basics
 metadata:
   adobe-target: true
   prefetch-feature-rollout: true
   title: Review identity protection basics
   description: "Review identity protection basics"
-  ms.date: 04/15/2025
+  ms.date: 04/16/2025
   author: wwlpublish
   ms.author: roberts
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/3-implement-manage-user-risk-policy.yml b/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/3-implement-manage-user-risk-policy.yml
@@ -1,12 +1,12 @@
 ### YamlMime:ModuleUnit
-uid: learn-pr/wwl-sci/manage-azure-active-directory-identity-protection.implement-manage-user-risk-policy
+uid: learn.wwl.manage-azure-active-directory-identity-protection.implement-manage-user-risk-policy
 title: Implement and manage user risk policy
 metadata:
   adobe-target: true
   prefetch-feature-rollout: true
   title: Implement and manage user risk policy
   description: "Implement and manage user risk policy"
-  ms.date: 04/15/2025
+  ms.date: 04/16/2025
   author: wwlpublish
   ms.author: roberts
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/4-exercise-enable-sign-risk-policy.yml b/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/4-exercise-enable-sign-risk-policy.yml
@@ -1,12 +1,12 @@
 ### YamlMime:ModuleUnit
-uid: learn-pr/wwl-sci/manage-azure-active-directory-identity-protection.enable-sign-in-risk-policy
+uid: learn.wwl.manage-azure-active-directory-identity-protection.enable-sign-in-risk-policy
 title: Exercise enable sign-in risk policy
 metadata:
   adobe-target: true
   prefetch-feature-rollout: true
   title: Exercise enable sign-in risk policy
   description: "Exercise enable sign-in risk policy"
-  ms.date: 04/15/2025
+  ms.date: 04/16/2025
   author: wwlpublish
   ms.author: roberts
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/5-exercise-configure-multi-factor-authentication-registration-policy.yml b/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/5-exercise-configure-multi-factor-authentication-registration-policy.yml
@@ -1,12 +1,12 @@
 ### YamlMime:ModuleUnit
-uid: learn-pr/wwl-sci/manage-azure-active-directory-identity-protection.implement-manage-sign-risk-policies
+uid: learn.wwl.manage-azure-active-directory-identity-protection.implement-manage-sign-risk-policies
 title: Exercise configure Microsoft Entra multifactor authentication registration policy
 metadata:
   adobe-target: true
   prefetch-feature-rollout: true
   title: Exercise configure Microsoft Entra multifactor authentication registration policy
   description: "Exercise configure Microsoft Entra multifactor authentication registration policy"
-  ms.date: 04/15/2025
+  ms.date: 04/16/2025
   author: wwlpublish
   ms.author: roberts
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/6-monitor-investigate-remediate-elevated-risky-users.yml b/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/6-monitor-investigate-remediate-elevated-risky-users.yml
@@ -1,12 +1,12 @@
 ### YamlMime:ModuleUnit
-uid: learn-pr/wwl-sci/manage-azure-active-directory-identity-protection.monitor-investigate-remediate-elevated-risky-users
+uid: learn.wwl.manage-azure-active-directory-identity-protection.monitor-investigate-remediate-elevated-risky-users
 title: Monitor, investigate, and remediate elevated risky users
 metadata:
   adobe-target: true
   prefetch-feature-rollout: true
   title: Monitor, investigate, and remediate elevated risky users
   description: "Monitor, investigate, and remediate elevated risky users"
-  ms.date: 04/15/2025
+  ms.date: 04/16/2025
   author: wwlpublish
   ms.author: roberts
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/7-implement-security-workload-identities.yml b/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/7-implement-security-workload-identities.yml
@@ -1,12 +1,12 @@
 ### YamlMime:ModuleUnit
-uid: learn-pr/wwl-sci/manage-azure-active-directory-identity-protection.implement-security-workload-identities
+uid: learn.wwl.manage-azure-active-directory-identity-protection.implement-security-workload-identities
 title: Implement security for workload identities
 metadata:
   adobe-target: true
   prefetch-feature-rollout: true
   title: Implement security for workload identities
   description: "Implement security for workload identities"
-  ms.date: 04/15/2025
+  ms.date: 04/16/2025
   author: wwlpublish
   ms.author: roberts
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/8-explore-microsoft-defender-identity.yml b/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/8-explore-microsoft-defender-identity.yml
@@ -1,12 +1,12 @@
 ### YamlMime:ModuleUnit
-uid: learn-pr/wwl-sci/manage-azure-active-directory-identity-protection.explore-microsoft-defender-identity
+uid: learn.wwl.manage-azure-active-directory-identity-protection.explore-microsoft-defender-identity
 title: Explore Microsoft Defender for Identity
 metadata:
   adobe-target: true
   prefetch-feature-rollout: true
   title: Explore Microsoft Defender for Identity
   description: "Explore Microsoft Defender for Identity"
-  ms.date: 04/15/2025
+  ms.date: 04/16/2025
   author: wwlpublish
   ms.author: roberts
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/9-knowledge-check.yml b/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/9-knowledge-check.yml
@@ -1,12 +1,12 @@
 ### YamlMime:ModuleUnit
-uid: learn-pr/wwl-sci/manage-azure-active-directory-identity-protection.knowledge-check
-title: Module Assessment
+uid: learn.wwl.manage-azure-active-directory-identity-protection.knowledge-check
+title: Module assessment
 metadata:
   adobe-target: true
   prefetch-feature-rollout: true
-  title: Module Assessment
-  description: "Module Assessment"
-  ms.date: 04/15/2025
+  title: Module assessment
+  description: "Module assessment"
+  ms.date: 04/16/2025
   author: wwlpublish
   ms.author: roberts
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/includes/2-review-identity-protection-basics.md b/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/includes/2-review-identity-protection-basics.md
@@ -14,43 +14,43 @@ The signals generated by and fed to Identity Protection can be further fed into
 
 Identity Protection identifies risks in the following classifications:
 
-| **Risk detection type**             | **Description**                                                                                              |
-| ----------------------------------- | ------------------------------------------------------------------------------------------------------------ |
-| Anonymous IP address                | Sign in from an anonymous IP address (for example: Tor browser, anonymizer VPNs).                            |
-| Atypical travel                     | Sign in from an atypical location based on the user's recent sign ins.                                       |
-| Malware-linked IP address           | Sign in from a malware-linked IP address.                                                                    |
-| Unfamiliar sign in properties       | Sign in with properties we've not seen recently for the given user.                                          |
-| Leaked credentials                  | Indicates that the user's valid credentials have been leaked.                                                |
+| **Risk detection type**             | **Description**                          |
+| ----------------------------------- | ---------------------------------------- |
+| Anonymous IP address                | Sign in from an anonymous IP address (for example: Tor browser, anonymizer VPNs). |
+| Atypical travel                     | Sign in from an atypical location based on the user's recent sign ins. |
+| Malware-linked IP address           | Sign in from a malware-linked IP address. |
+| Unfamiliar sign in properties       | Sign in with properties we've not seen recently for the given user. |
+| Leaked credentials                  | Indicates that the user's valid credentials have been leaked. |
 | Password spray                      | Indicates that multiple usernames are being attacked using common passwords in a unified brute-force manner. |
-| Microsoft Entra threat intelligence | Microsoft's internal and external threat intelligence sources have identified a known attack pattern.        |
-| New country                         | This detection is discovered by Microsoft Defender for Cloud Apps (MDCA).                                    |
-| Activity from anonymous IP address  | This detection is discovered by MDCA.                                                                        |
-| Suspicious inbox forwarding         | This detection is discovered by MDCA.                                                                        |
+| Microsoft Entra threat intelligence | Microsoft's internal and external threat intelligence sources have identified a known attack pattern. |
+| New country                         | This detection is discovered by Microsoft Defender for Cloud Apps (MDCA). |
+| Activity from anonymous IP address  | This detection is discovered by MDCA.    |
+| Suspicious inbox forwarding         | This detection is discovered by MDCA.    |
 
 ## Permissions
 
 Identity Protection requires users be a Security Reader, Security Operator, Security Administrator, Global Reader Administrator in order to access.
 
-| **Role**               | **Can do**                                                                                                            | **Can't do**                                                                                           |
-| ---------------------- | --------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------ |
-| Security Administrator | Full access to Identity Protection                                                                                    | Reset password for a user                                                                              |
-| Security Operator      | View all Identity Protection reports and Overview screen, Dismiss user risk, confirm safe sign-in, confirm compromise | Configure or change policies, Reset password for a user, Configure alerts                              |
-| Security Reader        | View all Identity Protection reports and Overview screen                                                              | Configure or change policies, Reset password for a user, Configure alerts, Give feedback on detections |
+| **Role**               | **Can do**                               | **Can't do**                             |
+| ---------------------- | ---------------------------------------- | ---------------------------------------- |
+| Security Administrator | Full access to Identity Protection       | Reset password for a user                |
+| Security Operator      | View all Identity Protection reports and Overview screen, Dismiss user risk, confirm safe sign-in, confirm compromise | Configure or change policies, Reset password for a user, Configure alerts |
+| Security Reader        | View all Identity Protection reports and Overview screen | Configure or change policies, Reset password for a user, Configure alerts, Give feedback on detections |
 
 Currently, the Security Operator role cannot access the Risky sign ins report. Conditional Access Administrators can also create policies that factor in sign-in risk as a condition.
 
 ## License requirements
 
 Using this feature requires a Microsoft Entra ID Premium P2 license.
 
-| **Capability**   | **Details**                                                         | **Microsoft Entra ID Free / Microsoft 365 Apps**                                                        | **Microsoft Entra ID Premium P1**                                                                       | **Microsoft Entra ID Premium P2** |
-| ---------------- | ------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------- | --------------------------------- |
-| Risk policies    | User risk policy (via Identity Protection)                          | No                                                                                                      | No                                                                                                      | Yes                               |
-| Risk policies    | Sign-in risk policy (via Identity Protection or Conditional Access) | No                                                                                                      | No                                                                                                      | Yes                               |
-| Security reports | Overview                                                            | No                                                                                                      | No                                                                                                      | Yes                               |
-| Security reports | Risky users                                                         | Limited information. Only users with medium and high risk are shown. No details drawer or risk history. | Limited information. Only users with medium and high risk are shown. No details drawer or risk history. | Full access                       |
-| Security reports | Risky sign ins                                                      | Limited information. No risk detail or risk level is shown.                                             | Limited information. No risk detail or risk level is shown.                                             | Full access                       |
-| Security reports | Risk detections                                                     | No                                                                                                      | Limited information. No details drawer.                                                                 | Full access                       |
-| Notifications    | Users at risk detected alerts                                       | No                                                                                                      | No                                                                                                      | Yes                               |
-| Notifications    | Weekly digest                                                       | No                                                                                                      | No                                                                                                      | Yes                               |
-|                  | MFA registration policy                                             | No                                                                                                      | No                                                                                                      | Yes                               |
+| **Capability**   | **Details**                              | **Microsoft Entra ID Free / Microsoft 365 Apps** | **Microsoft Entra ID Premium P1**        | **Microsoft Entra ID Premium P2** |
+| ---------------- | ---------------------------------------- | ---------------------------------------- | ---------------------------------------- | --------------------------------- |
+| Risk policies    | User risk policy (via Identity Protection) | No                                       | No                                       | Yes                               |
+| Risk policies    | Sign-in risk policy (via Identity Protection or Conditional Access) | No                                       | No                                       | Yes                               |
+| Security reports | Overview                                 | No                                       | No                                       | Yes                               |
+| Security reports | Risky users                              | Limited information. Only users with medium and high risk are shown. No details drawer or risk history. | Limited information. Only users with medium and high risk are shown. No details drawer or risk history. | Full access                       |
+| Security reports | Risky sign ins                           | Limited information. No risk detail or risk level is shown. | Limited information. No risk detail or risk level is shown. | Full access                       |
+| Security reports | Risk detections                          | No                                       | Limited information. No details drawer.  | Full access                       |
+| Notifications    | Users at risk detected alerts            | No                                       | No                                       | Yes                               |
+| Notifications    | Weekly digest                            | No                                       | No                                       | Yes                               |
+|                  | MFA registration policy                  | No                                       | No                                       | Yes                               |
diff --git a/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/includes/3-implement-manage-user-risk-policy.md b/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/includes/3-implement-manage-user-risk-policy.md
@@ -1,9 +1,9 @@
 There are two risk policies that can be enabled in the directory:
 
  - **Sign-in risk policy**: The sign-in risk policy detects suspicious actions that come along with the sign-in. It's focused on the sign-in activity itself and analyzes the probability that the sign-in was performed by some other than the user.
-    
+
    :::image type="content" source="../media/identity-protection-security-overview.png" alt-text="Screenshot of the Security overview page to enable user and sign-in risk policies.":::
-    
+
  - **User risk policy**: The user risk policy detects the probability that a user account has been compromised by detecting risk events that are atypical of a user's behavior.
 
 Both policies work to automate the response to risk detections in your environment and allow users to self-remediate when risk is detected.
diff --git a/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/includes/4-exercise-enable-sign-risk-policy.md b/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/includes/4-exercise-enable-sign-risk-policy.md
@@ -5,15 +5,15 @@
 3. On the Identity menu, select **Protection**.
 4. On the Security blade, in the left navigation, select **Identity protection**.
 5. In the Identity protection blade, in the left navigation, select User risk policy.
-    
+
    :::image type="content" source="../media/browse-identity-protection.png" alt-text="Screenshot of the User risk policy page and highlighted browsing path.":::
-    
+
 6. Under **Assignments**, select **All users** and review the available options. You can select from **All users** or **Select individuals and groups** if limiting your rollout. Additionally, you can choose to exclude users from the policy.
 7. Under **User risk**, select **Low and above**.
 8. In the User risk pane, select **High** and then select **Done**.
 9. Under **Controls**, then **Access**, and then select **Block access**.
 10. In the Access pane, review the available options.
-    
+
    > [!TIP]
    > Microsoft's recommendation is to Allow access and Require password change.
 
diff --git a/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/includes/5-exercise-configure-multi-factor-authentication-registration-policy.md b/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/includes/5-exercise-configure-multi-factor-authentication-registration-policy.md
@@ -7,9 +7,9 @@ Multifactor authentication provides a means to verify who you are using more tha
 3. On the Identity men, select **Protection**.
 4. On the Security blade, in the left navigation, select **Identity protection**.
 5. In the Identity protection blade, in the left navigation, select **Multifactor authentication registration policy**.
-    
+
    :::image type="content" source="../media/browse-registration-policy.png" alt-text="Screenshot of the MFA registration policy page with browsing path highlighted.":::
-    
+
 6.  Under **Assignments**, select **All users** and review the available options. You can select from **All users** or **Select individuals and groups** if limiting your rollout. Additionally, you can choose to exclude users from the policy.
 7.  Under **Controls**, notice that the **Require Microsoft Entra ID multifactor authentication registration** is selected and cannot be changed.
 8.  Under **Enforce Policy**, select **Enabled** and then select **Save**.
diff --git a/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/includes/6-monitor-investigate-remediate-elevated-risky-users.md b/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/includes/6-monitor-investigate-remediate-elevated-risky-users.md
diff --git a/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/includes/7-implement-security-workload-identities.md b/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/includes/7-implement-security-workload-identities.md
diff --git a/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/includes/8-explore-microsoft-defender-identity.md b/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/includes/8-explore-microsoft-defender-identity.md
diff --git a/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/index.yml b/learn-pr/wwl-sci/manage-azure-active-directory-identity-protection/index.yml
