Apply suggestions from code review

Co-authored-by: Jessica He <[email protected]>

Author: themr0c

modules/authentication/proc-enabling-user-authentication-with-microsoft-azure.adoc

@@ -12,14 +12,14 @@ Alternatively, you can ask your {azure-short} administrator to prepare the requi
 * Your {product-short} backend can access the following hosts:
 
 `login.microsoftonline.com`::
-For obtaining and exchanging authorization codes and access tokens.
+This is the {azure-brand-name} authorization server, which enables the authentication flow.
 
 `graph.microsoft.com`::
-For retrieving user profile information (as referenced in the source code), and avoiding an _Authentication failed, failed to fetch user profile_ error when attempting to log in.
+For retrieving organization data, including user and group data, to be ingested into the {product-short} catalog.
 
 .Procedure
 :my-product-app-name-in-azure: <Authenticating with {product-short}>
-. To allow {product-short} to authenticate with {azure-brand-name}, link:https://learn.microsoft.com/en-us/entra/identity-platform/scenario-web-app-sign-user-app-registration?tabs=aspnetcore#register-an-app-by-using-the-azure-portal[create an OAuth application in {azure-short}].
+. To allow {product-short} to authenticate with {azure-short}, link:https://learn.microsoft.com/en-us/entra/identity-platform/scenario-web-app-sign-user-app-registration?tabs=aspnetcore#register-an-app-by-using-the-azure-portal[Register an app by using the {azure-short} portal].
 
 .. In the {azure-short} portal go to link:https://portal.azure.com/#view/Microsoft_AAD_RegisteredApps/ApplicationsListBlade[*App registrations*], create a **New registration** with the configuration:
 
@@ -426,7 +426,7 @@ auth:
 After successful authentication, {product-short} resolves the user signing in to an existing user in the {product-short} catalog.
 To best match users securely for your use case, consider configuring a specific resolver.
 +
-Enter the resolver list to override the default resolver: `emailLocalPartMatchingUserEntityName`.
+Enter the resolver list to override the default resolver: `userIdMatchingUserEntityAnnotation`.
 +
 The authentication provider tries each sign-in resolver in order until it succeeds, and fails if none succeed.
 +