Merge pull request #17 from MicrosoftDocs/master

Update fork
changeworld · Oct 24, 2019 · bed40be · bed40be
2 parents c7fee79 + c581681
commit bed40be
Show file tree

Hide file tree

Showing 1,727 changed files with 24,316 additions and 17,999 deletions.
diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json
diff --git a/articles/active-directory-b2c/active-directory-b2c-reference-spa.md b/articles/active-directory-b2c/active-directory-b2c-reference-spa.md
@@ -167,7 +167,7 @@ client_id=90c0fe63-bcf2-44d5-8fb7-b8bbc0b29dc6
 | response_type |Required |Must include `id_token` for OpenID Connect sign-in.  It might also include the response type `token`. If you use `token` here, your app can immediately receive an access token from the authorize endpoint, without making a second request to the authorize endpoint. If you use the `token` response type, the `scope` parameter must contain a scope that indicates which resource to issue the token for. |
 | redirect_uri |Recommended |The redirect URI of your app, where authentication responses can be sent and received by your app. It must exactly match one of the redirect URIs you registered in the portal, except that it must be URL-encoded. |
 | scope |Required |A space-separated list of scopes.  For getting tokens, include all scopes that you require for the intended resource. |
-| response_mode |Recommended |Specifies the method that is used to send the resulting token back to your app.  Can be `query`, `form_post`, or `fragment`. |
+| response_mode |Recommended |Specifies the method that is used to send the resulting token back to your app. For implicit flow, use `fragment`. Two other modes can be specified, `query` and `form_post`,  but do not work in the implicit flow. |
 | state |Recommended |A value included in the request that is returned in the token response.  It can be a string of any content that you want to use.  Usually, a randomly generated, unique value is used, to prevent cross-site request forgery attacks.  The state also is used to encode information about the user's state in the app before the authentication request occurred. For example, the page or view the user was on. |
 | nonce |Required |A value included in the request, generated by the app, that is included in the resulting ID token as a claim.  The app can then verify this value to mitigate token replay attacks. Usually, the value is a randomized, unique string that identifies the origin of the request. |
 | prompt |Required |To refresh and get tokens in a hidden iframe, use `prompt=none` to ensure that the iframe does not get stuck on the sign-in page, and returns immediately. |
@@ -246,4 +246,4 @@ This sample on GitHub is intended to help get you started with Azure AD B2C in a
 
 <!-- Links - EXTERNAL -->
 [github-hello-js-example]: https://github.com/azure-ad-b2c/apps/tree/master/spa/javascript-hellojs-singlepageapp-popup
-[github-hello-js]: https://github.com/MrSwitch/hello.js
+[github-hello-js]: https://github.com/MrSwitch/hello.js
diff --git a/articles/active-directory-b2c/active-directory-b2c-setup-commonaad-custom.md b/articles/active-directory-b2c/active-directory-b2c-setup-commonaad-custom.md
@@ -83,7 +83,7 @@ You can define Azure AD as a claims provider by adding Azure AD to the **ClaimsP
             <!-- Update the Client ID below to the Application ID -->
             <Item Key="client_id">00000000-0000-0000-0000-000000000000</Item>
             <Item Key="response_types">code</Item>
-            <Item Key="scope">openid</Item>
+            <Item Key="scope">openid profile</Item>
             <Item Key="response_mode">form_post</Item>
             <Item Key="HttpBinding">POST</Item>
             <Item Key="UsePolicyInRedirectUri">false</Item>

diff --git a/.../active-directory-b2c/active-directory-b2c-setup-oidc-azure-active-directory.md b/.../active-directory-b2c/active-directory-b2c-setup-oidc-azure-active-directory.md
@@ -11,6 +11,7 @@ ms.topic: conceptual
 ms.date: 08/08/2019
 ms.author: marsma
 ms.subservice: B2C
+ms.custom: fasttrack-edit
 ---
 
 # Set up sign-in for a specific Azure Active Directory organization in Azure Active Directory B2C
@@ -55,6 +56,8 @@ To enable sign-in for users from a specific Azure AD organization, you need to r
 
     For example, `https://login.microsoftonline.com/contoso.onmicrosoft.com/.well-known/openid-configuration`.
 
+    **Do not** use the Azure AD v2.0 metadata endpoint, for example `https://login.microsoftonline.com/contoso.onmicrosoft.com/v2.0/.well-known/openid-configuration`. Doing so results in an error similar to `AADB2C: A claim with id 'UserId' was not found, which is required by ClaimsTransformation 'CreateAlternativeSecurityId' with id 'CreateAlternativeSecurityId' in policy 'B2C_1_SignUpOrIn' of tenant 'contoso.onmicrosoft.com'` when attempting to sign in.
+
 1. For **Client ID**, enter the application ID that you previously recorded.
 1. For **Client secret**, enter the client secret that you previously recorded.
 1. Leave the default values for **Scope**, **Response type**, and **Response mode**.

diff --git a/articles/active-directory-domain-services/TOC.yml b/articles/active-directory-domain-services/TOC.yml
@@ -9,8 +9,10 @@
 - name: Tutorials
   expanded: true
   items:
-    - name: Create a managed domain
+    - name: Create a basic managed domain
       href: tutorial-create-instance.md
+    - name: Configure the virtual network for apps
+      href: tutorial-configure-networking.md
     - name: Domain-join a Windows Server VM
       href: join-windows-vm.md
     - name: Install management tools
@@ -19,6 +21,8 @@
       href: tutorial-configure-ldaps.md
     - name: Configure password hash sync
       href: tutorial-configure-password-hash-sync.md
+    - name: Create an advanced managed domain
+      href: tutorial-create-instance-advanced.md
 - name: Samples
   items:
     - name: Create a managed domain using Azure PowerShell
@@ -65,6 +69,8 @@
           href: notifications.md
         - name: Delete a managed domain
           href: delete-aadds.md
+        - name: Migrate from a Classic deployment (preview)
+          href: migrate-from-classic-vnet.md
     - name: Secure Azure AD DS
       items:
         - name: Secure your managed domain

diff --git a/articles/active-directory-domain-services/compatible-software.md b/articles/active-directory-domain-services/compatible-software.md
@@ -1,5 +1,5 @@
 ---
-title: 'Azure Active Directory Domain Services: Compatible third party software | Microsoft Docs'
+title: Compatible third party software for Azure AD Domain Services | Microsoft Docs
 description: Third party software that works with Azure Active Directory Domain Services
 services: active-directory-ds
 documentationcenter: ''

diff --git a/articles/active-directory-domain-services/csp.md b/articles/active-directory-domain-services/csp.md
@@ -1,5 +1,5 @@
 ---
-title: 'Azure Active Directory Domain Services for Azure Cloud Solution Providers | Microsoft Docs'
+title: Azure AD Domain Services for Cloud Solution Providers | Microsoft Docs
 description: Azure Active Directory Domain Services for Azure Cloud Solution Providers.
 services: active-directory-ds
 documentationcenter: ''

diff --git a/articles/active-directory-domain-services/deploy-azure-app-proxy.md b/articles/active-directory-domain-services/deploy-azure-app-proxy.md
@@ -1,5 +1,5 @@
 ---
-title: 'Azure Active Directory Domain Services: Deploy Azure AD Application Proxy | Microsoft Docs'
+title: Deploy Azure AD Application Proxy for Azure AD Domain Services | Microsoft Docs
 description: Use Azure AD Application Proxy on Azure Active Directory Domain Services managed domains
 services: active-directory-ds
 documentationcenter: ''

diff --git a/articles/active-directory-domain-services/faqs.md b/articles/active-directory-domain-services/faqs.md
@@ -43,7 +43,7 @@ Classic virtual networks aren't supported for new deployments. Existing managed
 Yes. Azure AD Domain Services can be enabled in an Azure Resource Manager virtual network. Classic Azure virtual networks are no longer supported for when you create a new managed domain.
 
 ### Can I migrate my existing managed domain from a Classic virtual network to a Resource Manager virtual network?
-Not at this time. There's on-going engineering work to migrate existing managed domains from a Classic virtual network to a Resource Manager virtual network.
+Yes, this feature is in preview. For more information, see [Migrate Azure AD Domain Services from the Classic virtual network model to Resource Manager (preview)][migrate-from-classic-vnet.md]
 
 ### Can I enable Azure AD Domain Services in an Azure CSP (Cloud Solution Provider) subscription?
 Yes. For more information, see [how to enable Azure AD Domain Services in Azure CSP subscriptions](csp.md).

diff --git a/articles/active-directory-domain-services/join-centos-linux-vm.md b/articles/active-directory-domain-services/join-centos-linux-vm.md
@@ -1,5 +1,5 @@
 ---
-title: Join a CentOS VM to Azure AD Domain Services | Microsoft Docs'
+title: Join a CentOS VM to Azure AD Domain Services | Microsoft Docs
 description: Learn how to configure and join a CentOS Linux virtual machine to an Azure AD Domain Services managed domain.
 services: active-directory-ds
 author: iainfoulds

diff --git a/articles/active-directory-domain-services/join-coreos-linux-vm.md b/articles/active-directory-domain-services/join-coreos-linux-vm.md
@@ -1,5 +1,5 @@
 ---
-title: Join a CoreOS VM to Azure AD Domain Services | Microsoft Docs'
+title: Join a CoreOS VM to Azure AD Domain Services | Microsoft Docs
 description: Learn how to configure and join a CoreOS virtual machine to an Azure AD Domain Services managed domain.
 services: active-directory-ds
 author: iainfoulds

diff --git a/articles/active-directory-domain-services/join-rhel-linux-vm.md b/articles/active-directory-domain-services/join-rhel-linux-vm.md
@@ -1,5 +1,5 @@
 ---
-title: Join a RHEL VM to Azure AD Domain Services | Microsoft Docs'
+title: Join a RHEL VM to Azure AD Domain Services | Microsoft Docs
 description: Learn how to configure and join a Red Hat Enterprise Linux virtual machine to an Azure AD Domain Services managed domain.
 services: active-directory-ds
 author: iainfoulds

diff --git a/articles/active-directory-domain-services/join-ubuntu-linux-vm.md b/articles/active-directory-domain-services/join-ubuntu-linux-vm.md
@@ -1,5 +1,5 @@
 ---
-title: Join an Ubuntu VM to Azure AD Domain Services | Microsoft Docs'
+title: Join an Ubuntu VM to Azure AD Domain Services | Microsoft Docs
 description: Learn how to configure and join an Ubuntu Linux virtual machine to an Azure AD Domain Services managed domain.
 services: active-directory-ds
 author: iainfoulds

diff --git a/articles/active-directory-domain-services/join-windows-vm-template.md b/articles/active-directory-domain-services/join-windows-vm-template.md
@@ -1,5 +1,5 @@
 ---
-title: Use a template to join a Windows Server VM to Azure AD DS | Microsoft Docs
+title: Use a template to join a Windows VM to Azure AD DS | Microsoft Docs
 description: Learn how to use Azure Resource Manager templates to join a new or existing Windows Server VM to an Azure Active Directory Domain Services managed domain.
 services: active-directory-ds
 author: iainfoulds

diff --git a/articles/active-directory-domain-services/join-windows-vm.md b/articles/active-directory-domain-services/join-windows-vm.md
@@ -1,5 +1,5 @@
 ---
-title: Join a Windows Server VM to a managed domain | Microsoft Docs'
+title: Join a Windows Server VM to a managed domain | Microsoft Docs
 description: In this tutorial, learn how to join a Windows Server virtual machine to an Azure Active Directory Domain Services managed domain.
 author: iainfoulds
 manager: daveba

diff --git a/...-domain-services/media/migrate-from-classic-vnet/migrate-multiple-resources.png b/...-domain-services/media/migrate-from-classic-vnet/migrate-multiple-resources.png
diff --git a/...ry-domain-services/media/migrate-from-classic-vnet/migrate-only-azure-ad-ds.png b/...ry-domain-services/media/migrate-from-classic-vnet/migrate-only-azure-ad-ds.png
diff --git a/...ry-domain-services/media/migrate-from-classic-vnet/migrate-to-existing-vnet.png b/...ry-domain-services/media/migrate-from-classic-vnet/migrate-to-existing-vnet.png
diff --git a/...irectory-domain-services/media/migrate-from-classic-vnet/migration-overview.png b/...irectory-domain-services/media/migrate-from-classic-vnet/migration-overview.png
diff --git a/...ctory-domain-services/media/migrate-from-classic-vnet/migration-preparation.png b/...ctory-domain-services/media/migrate-from-classic-vnet/migration-preparation.png
diff --git a/...directory-domain-services/media/migrate-from-classic-vnet/migration-process.png b/...directory-domain-services/media/migrate-from-classic-vnet/migration-process.png
diff --git a/...domain-services/media/migrate-from-classic-vnet/powershell-migration-status.png b/...domain-services/media/migrate-from-classic-vnet/powershell-migration-status.png
diff --git a/...-domain-services/media/tutorial-configure-networking/add-vnet-address-range.png b/...-domain-services/media/tutorial-configure-networking/add-vnet-address-range.png
diff --git a/...rectory-domain-services/media/tutorial-configure-networking/add-vnet-subnet.png b/...rectory-domain-services/media/tutorial-configure-networking/add-vnet-subnet.png
diff --git a/...ctory-domain-services/media/tutorial-configure-networking/connected-peering.png b/...ctory-domain-services/media/tutorial-configure-networking/connected-peering.png
diff --git a/...irectory-domain-services/media/tutorial-configure-networking/create-peering.png b/...irectory-domain-services/media/tutorial-configure-networking/create-peering.png
diff --git a/...ve-directory-domain-services/media/tutorial-configure-networking/custom-dns.png b/...ve-directory-domain-services/media/tutorial-configure-networking/custom-dns.png
diff --git a/...rectory-domain-services/media/tutorial-create-instance-advanced/admin-group.png b/...rectory-domain-services/media/tutorial-create-instance-advanced/admin-group.png
diff --git a/...ctory-domain-services/media/tutorial-create-instance-advanced/basics-window.png b/...ctory-domain-services/media/tutorial-create-instance-advanced/basics-window.png
diff --git a/...utorial-create-instance/choose-subnet.png → ...reate-instance-advanced/choose-subnet.png b/...utorial-create-instance/choose-subnet.png → ...reate-instance-advanced/choose-subnet.png
diff --git a/...ctory-domain-services/media/tutorial-create-instance-advanced/configure-dns.png b/...ctory-domain-services/media/tutorial-create-instance-advanced/configure-dns.png
diff --git a/...rectory-domain-services/media/tutorial-create-instance-advanced/create-vnet.png b/...rectory-domain-services/media/tutorial-create-instance-advanced/create-vnet.png
diff --git a/...ain-services/media/tutorial-create-instance-advanced/deployment-in-progress.png b/...ain-services/media/tutorial-create-instance-advanced/deployment-in-progress.png
diff --git a/...n-services/media/tutorial-create-instance-advanced/provisioning-in-progress.png b/...n-services/media/tutorial-create-instance-advanced/provisioning-in-progress.png
diff --git a/...tory-domain-services/media/tutorial-create-instance-advanced/select-profile.png b/...tory-domain-services/media/tutorial-create-instance-advanced/select-profile.png
diff --git a/...n-services/media/tutorial-create-instance-advanced/successfully-provisioned.png b/...n-services/media/tutorial-create-instance-advanced/successfully-provisioned.png
diff --git a/...-directory-domain-services/media/tutorial-create-instance-advanced/sync-all.png b/...-directory-domain-services/media/tutorial-create-instance-advanced/sync-all.png
diff --git a/...active-directory-domain-services/media/tutorial-create-instance/admin-group.png b/...active-directory-domain-services/media/tutorial-create-instance/admin-group.png
diff --git a/...tive-directory-domain-services/media/tutorial-create-instance/basics-window.png b/...tive-directory-domain-services/media/tutorial-create-instance/basics-window.png
diff --git a/...active-directory-domain-services/media/tutorial-create-instance/create-vnet.png b/...active-directory-domain-services/media/tutorial-create-instance/create-vnet.png
diff --git a/...ctory-domain-services/media/tutorial-create-instance/deployment-in-progress.png b/...ctory-domain-services/media/tutorial-create-instance/deployment-in-progress.png
diff --git a/...es/active-directory-domain-services/media/tutorial-create-instance/sync-all.png b/...es/active-directory-domain-services/media/tutorial-create-instance/sync-all.png