Merge pull request #133365 from MicrosoftDocs/master

Merge Master to Live, 4 AM

Author: PMEds28

articles/active-directory/saas-apps/apple-business-manager-provision-tutorial.md

@@ -158,7 +158,7 @@ Once you've configured provisioning, use the following resources to monitor your
 * [Manage existing SCIM token and connections in Apple Business Manager](https://support.apple.com/guide/apple-business-manager/apdc9a823611)
 * [Disconnect the SCIM connection in Apple Business Manager](https://support.apple.com/guide/apple-business-manager/apd609be3a61)
 * [Manage existing SCIM token and connections in Apple Business Manager](https://support.apple.com/guide/apple-business-manager/apdc9a8236e9)
-* [Troubleshooting the SCIM connection in Apple Business Manager](URL=https://support.apple.com/guide/apple-business-manager/apd403a0f3bd)
+* [Troubleshooting the SCIM connection in Apple Business Manager](https://support.apple.com/guide/apple-business-manager/apd403a0f3bd/web)
 
 ## Next steps
 

articles/active-directory/saas-apps/cinode-provisioning-tutorial.md

@@ -51,7 +51,7 @@ The scenario outlined in this tutorial assumes that you already have the followi
 
 3. Navigate to **Tokens** and create a new token.
 
-4. Enter a unique name, select https://api.cinode.app/scim/v2 as Audience, and set an expiry date appropriately.
+4. Enter a unique name, select **'https://api.cinode.app/scim/v2'** as Audience, and set an expiry date appropriately.
 
 5. Click **Create token**.
 

articles/active-directory/saas-apps/mimecast-admin-console-tutorial.md

@@ -150,23 +150,23 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
 
 1. Navigate to **Administration** > **Services** > **Applications**.
 
-    ![Mimecast Admin Console Configuration](./media/mimecast-admin-console-tutorial/services.png)
+    ![Screenshot shows Mimecast window with Applications selected.](./media/mimecast-admin-console-tutorial/services.png)
 
 1. Click **Authentication Profiles** tab.
 
-    ![Mimecast Admin Console Configuration](./media/mimecast-admin-console-tutorial/authentication-profiles.png)
+    ![Screenshot shows the Application tab with Authentication Profiles selected.](./media/mimecast-admin-console-tutorial/authentication-profiles.png)
 
 1. Click **New Authentication Profile** tab.
 
-	![Mimecast Admin Console Configuration](./media/mimecast-admin-console-tutorial/new-authenticatio-profile.png)
+	![Screenshot shows New Authentication Profile selected.](./media/mimecast-admin-console-tutorial/new-authenticatio-profile.png)
 
 1. Provide a valid description in the **Description** textbox and select **Enforce SAML Authentication for Administration Console** checkbox.
 
-    ![Mimecast Admin Console Configuration](./media/mimecast-admin-console-tutorial/selecting-admin-consle.png)
+    ![Screenshot shows where to select Enforce SAML Authentication for Administration Console.](./media/mimecast-admin-console-tutorial/selecting-admin-consle.png)
 
 1. On the **SAML Configuration for Administration Console** page, perform the following steps:
 
-    ![Mimecast Admin Console Configuration](./media/mimecast-admin-console-tutorial/sso-settings.png)
+    ![Screenshot shows the SAML Configuration for Administration Console page where you can enter the values described.](./media/mimecast-admin-console-tutorial/sso-settings.png)
 
 	a. For **Provider**, select **Azure Active Directory** from the Dropdown.
 
@@ -184,19 +184,19 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
 
 1. Navigate to **Administration** > **Directories** > **Internal Directories**.
 
-    ![Mimecast Admin Console Configuration](./media/mimecast-admin-console-tutorial/internal-directories.png)
+    ![Screenshot shows Mimecast window with Internal Directories selected.](./media/mimecast-admin-console-tutorial/internal-directories.png)
 
 1. Select on your domain, if the domain is mentioned below, otherwise please create a new domain by clicking on the **New Domain**.
 
-    ![Mimecast Admin Console Configuration](./media/mimecast-admin-console-tutorial/domain-name.png)
+    ![Screenshot shows the domain selected.](./media/mimecast-admin-console-tutorial/domain-name.png)
 
 1. Click **New Address** tab.
 
-    ![Mimecast Admin Console Configuration](./media/mimecast-admin-console-tutorial/new-address.png)
+    ![Screenshot shows New Address selected.](./media/mimecast-admin-console-tutorial/new-address.png)
 
 1. Provide the required user information on the following page:
 
-    ![Mimecast Admin Console Configuration](./media/mimecast-admin-console-tutorial/user-information.png)
+    ![Screenshot shows the page where you can enter the values described.](./media/mimecast-admin-console-tutorial/user-information.png)
 
 	a. In the **Email Address** textbox, enter the email address of the user like `[email protected]`.
 
@@ -210,7 +210,7 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
 
 	f. To assign roles to the user, click on **Role Edit** and assign the required role to user as per your organization requirement.
 
-    ![Mimecast Admin Console Configuration](./media/mimecast-admin-console-tutorial/assign-role.png)
+    ![Screenshot shows Address Settings where you can select Role Edit.](./media/mimecast-admin-console-tutorial/assign-role.png)
 
 ## Test SSO 
 

articles/active-directory/saas-apps/mimecast-personal-portal-tutorial.md

@@ -150,23 +150,23 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
 
 1. Navigate to **Administration** > **Services** > **Applications**.
 
-    ![Mimecast Personal Portal Configuration](./media/mimecast-personal-portal-tutorial/services.png)
+    ![Screenshot shows Mimecast window with Applications selected.](./media/mimecast-personal-portal-tutorial/services.png)
 
 1. Click **Authentication Profiles** tab.
 
-    ![Mimecast Personal Portal Configuration](./media/mimecast-personal-portal-tutorial/authentication-profiles.png)
+    ![Screenshot shows the Application tab with Authentication Profiles selected.](./media/mimecast-personal-portal-tutorial/authentication-profiles.png)
 
 1. Click **New Authentication Profile** tab.
 
-	![Mimecast Personal Portal Configuration](./media/mimecast-personal-portal-tutorial/new-authenticatio-profile.png)
+	![Screenshot shows new Authentication Profile selected.](./media/mimecast-personal-portal-tutorial/new-authenticatio-profile.png)
 
 1. Provide a valid description in the **Description** textbox and select **Enforce SAML Authentication for Mimecast Personal Portal** checkbox.
 
-    ![Mimecast Personal Portal Configuration](./media/mimecast-personal-portal-tutorial/selecting-personal-portal.png)
+    ![Screenshot shows New Authentication Profile selected.](./media/mimecast-personal-portal-tutorial/selecting-personal-portal.png)
 
 1. On the **SAML Configuration for Mimecast Personal Portal** page, perform the following steps:
 
-    ![Mimecast Personal Portal Configuration](./media/mimecast-personal-portal-tutorial/sso-settings.png)
+    ![Screenshot shows where to select Enforce SAML Authentication for Administration Console.](./media/mimecast-personal-portal-tutorial/sso-settings.png)
 
 	a. For **Provider**, select **Azure Active Directory** from the Dropdown.
 
@@ -184,19 +184,19 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
 
 1. Navigate to **Administration** > **Directories** > **Internal Directories**.
 
-    ![Mimecast Personal Portal Configuration](./media/mimecast-personal-portal-tutorial/internal-directories.png)
+    ![Screenshot shows the SAML Configuration for Mimecast Personal Portal where you can enter the values described.](./media/mimecast-personal-portal-tutorial/internal-directories.png)
 
 1. Select on your domain, if the domain is mentioned below, otherwise please create a new domain by clicking on the **New Domain**.
 
-    ![Mimecast Personal Portal Configuration](./media/mimecast-personal-portal-tutorial/domain-name.png)
+    ![Screenshot shows Mimecast window with Internal Directories selected.](./media/mimecast-personal-portal-tutorial/domain-name.png)
 
 1. Click **New Address** tab.
 
-    ![Mimecast Personal Portal Configuration](./media/mimecast-personal-portal-tutorial/new-address.png)
+    ![Screenshot shows the domain selected.](./media/mimecast-personal-portal-tutorial/new-address.png)
 
 1. Provide the required user information on the following page:
 
-    ![Mimecast Personal Portal Configuration](./media/mimecast-personal-portal-tutorial/user-information.png)
+    ![Screenshot shows the page where you can enter the values described.](./media/mimecast-personal-portal-tutorial/user-information.png)
 
 	a. In the **Email Address** textbox, enter the email address of the user like `[email protected]`.
 
@@ -210,7 +210,7 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
 
 	f. To assign roles to the user, click on **Role Edit** and assign the required role to user as per your organization requirement.
 
-    ![Mimecast Personal Portal Configuration](./media/mimecast-personal-portal-tutorial/assign-role.png)
+    ![Screenshot shows Address Settings where you can select Role Edit.](./media/mimecast-personal-portal-tutorial/assign-role.png)
 
 
 ## Test SSO 

articles/active-directory/saas-apps/mitel-connect-tutorial.md

@@ -106,15 +106,15 @@ To configure MiCloud Connect with SSO for Azure AD, it is easiest to open the Az
 
 4. In the Azure portal, select the **Edit** icon in the **Basic SAML Configuration** section.
 
-    ![image](common/edit-urls.png)
+    ![Screenshot shows the Set up Single Sign-On with SAML page with the edit icon selected.](common/edit-urls.png)
 
     The Basic SAML Configuration dialog box appears.
 
 5.  Copy the URL from the **Mitel Identifier (Entity ID)** field in the Mitel Account portal and paste it into the **Identifier (Entity ID)** field in the Azure portal.
 
 6. Copy the URL from the **Reply URL (Assertion Consumer Service URL)** field in the Mitel Account portal and paste it into the **Reply URL (Assertion Consumer Service URL)** field in the Azure portal.
 
-   ![image](./media/mitel-connect-tutorial/mitel-azure-basic-configuration.png)
+   ![Screenshot shows Basic SAML Configuration in the Azure portal and the Set Up Identity Provider section in the Mitel Account portal with lines indicating the relationship between them.](./media/mitel-connect-tutorial/mitel-azure-basic-configuration.png)
 
 7. In the **Sign-on URL** text box, type one of the following URLs:
 
@@ -128,19 +128,19 @@ To configure MiCloud Connect with SSO for Azure AD, it is easiest to open the Az
 
 9. In the **SAML Signing Certificate** section on the **SAML-based sign-on** page in the Azure portal, select **Download** next to **Certificate (Base64)** to download the **Signing Certificate** and save it to your computer.
 
-    ![image](./media/mitel-connect-tutorial/azure-signing-certificate.png)
+    ![Screenshot shows the SAML Signing Certificate pane where you can download a certificate.](./media/mitel-connect-tutorial/azure-signing-certificate.png)
 
 10. Open the Signing Certificate file in a text editor, copy all data in the file, and then paste the data in the **Signing Certificate** field in the Mitel Account portal. 
 
-      ![image](./media/mitel-connect-tutorial/mitel-connect-signing-certificate.png)
+      ![Screenshot shows the Signing Certificate field.](./media/mitel-connect-tutorial/mitel-connect-signing-certificate.png)
 
 11. In the **Setup Mitel Connect** section on the **SAML-based sign-on** page of the Azure portal:
 
      1. Copy the URL from the **Login URL** field and paste it into the **Sign-in URL** field in the Mitel Account portal.
 
      1. Copy the URL from the **Azure AD Identifier** field and paste it into the **Entity ID** field in the Mitel Account portal.
 
-         ![image](./media/mitel-connect-tutorial/mitel-azure-set-up-connect.png)
+         ![Screenshot shows the relationship between the SAML-based sign-on page of the Azure portal and the Mitel Account portal.](./media/mitel-connect-tutorial/mitel-azure-set-up-connect.png)
 
 12. Select **Save** on the **Connect Single Sign-On Settings** dialog box in the Mitel Account portal.
 
@@ -235,7 +235,7 @@ To configure CloudLink platform with single sign-on for Azure AD, it is recommen
 
 	   The **SAML-based Sign-on** page opens, displaying the **Basic SAML Configuration** section.
 
-       ![image](./media/mitel-connect-tutorial/mitel-azure-saml-settings.png)
+       ![Screenshot shows the SAML-based Sign-on page with Basic SAML Configuration.](./media/mitel-connect-tutorial/mitel-azure-saml-settings.png)
 
 2. To access the **Azure AD Single Sign On** configuration panel in the CloudLink Accounts portal:
 
@@ -245,33 +245,33 @@ To configure CloudLink platform with single sign-on for Azure AD, it is recommen
 
     1. Select the **3rd party** tab. A list of supported third-party applications is displayed. Select the **Add** button associated with **Azure AD Single Sign On**,  and select **Done**.
 
-       ![image](./media/mitel-connect-tutorial/mitel-cloudlink-integrations.png)
+       ![Screenshot shows the Integrations page where you can add Azure A D Single Sign-On.](./media/mitel-connect-tutorial/mitel-cloudlink-integrations.png)
 
        The **Azure AD Single Sign On** is enabled for the customer account and is added to the **Integrations** section of the **Account Information** page.   
 
    1. Select **Complete Setup**.
 
-      ![image](./media/mitel-connect-tutorial/mitel-cloudlink-complete-setup.png)
+      ![Screenshot shows the Complete Setup option for Azure A D Single Sign-On.](./media/mitel-connect-tutorial/mitel-cloudlink-complete-setup.png)
 
       The **Azure AD Single Sign On** configuration panel opens.
 
-       ![image](./media/mitel-connect-tutorial/mitel-cloudlink-sso-setup.png)
+       ![Screenshot shows Azure A D Single Sign-On configuration.](./media/mitel-connect-tutorial/mitel-cloudlink-sso-setup.png)
 
        Mitel recommends that the **Enable Mitel Credentials (Optional)** check box in the **Optional Mitel credentials** section is not selected. Select this check box only if you want the user to sign in to the CloudLink application using the Mitel credentials in addition to the single sign-on option.
 
 3. In the Azure portal, from the **SAML-based Sign-on** page, select the **Edit** icon  in the **Basic SAML Configuration** section. The **Basic SAML Configuration** panel opens.
 
-    ![image](./media/mitel-connect-tutorial/mitel-azure-saml-basic.png)
+    ![Screenshot shows the Basic SAML Configuration pane with the Edit icon selected.](./media/mitel-connect-tutorial/mitel-azure-saml-basic.png)
 
  4. Copy the URL from the **Mitel Identifier (Entity ID)** field in the CloudLink Accounts portal and paste it into the **Identifier (Entity ID)** field in the Azure portal.
 
  5. Copy the URL from the **Reply URL (Assertion Consumer Service URL)** field in the CloudLink Accounts portal and paste it into the **Reply URL (Assertion Consumer Service URL)** field in the Azure portal.  
 
-    ![image](./media/mitel-connect-tutorial/mitel-cloudlink-saml-mapping.png) 
+    ![Screenshot shows the relation between pages in the CloudLink Accounts portal and the Azure portal.](./media/mitel-connect-tutorial/mitel-cloudlink-saml-mapping.png) 
 
  6. In the **Sign-on URL** text box, type the URL `https://accounts.mitel.io` to use the CloudLink Accounts portal as your default Mitel application.
 
-     ![image](./media/mitel-connect-tutorial/mitel-cloudlink-sign-on-url.png)
+     ![Screenshot shows the Sign on U R L text box.](./media/mitel-connect-tutorial/mitel-cloudlink-sign-on-url.png)
 
      > [!NOTE]
      > The default Mitel application is the application that opens when a user selects the Mitel Connect tile in the Access Panel. This is also the application accessed when the user configures a test setup from Azure AD.
@@ -280,22 +280,22 @@ To configure CloudLink platform with single sign-on for Azure AD, it is recommen
 
 8. In the **SAML Signing Certificate** section on the **SAML-based sign-on** page in the Azure portal, select **Download** beside **Certificate (Base64)** to download the **Signing Certificate**. Save the certificate on your computer.
 
-    ![image](./media/mitel-connect-tutorial/mitel-cloudlink-save-certificate.png)
+    ![Screenshot shows the SAML Signing Certificate section where you can download a Base64 certificate.](./media/mitel-connect-tutorial/mitel-cloudlink-save-certificate.png)
 
 9. Open the Signing Certificate file in a text editor, copy all data in the file, and then paste the data into the **Signing Certificate** field in the CloudLink Accounts portal.  
 
     > [!NOTE]
     > If you have more than one certificate, we recommend that you paste them one after the other. 
        
-    ![image](./media/mitel-connect-tutorial/mitel-cloudlink-enter-certificate.png)
+    ![Screenshot shows Step two of the procedure where you fill in values from your Azure A D integration.](./media/mitel-connect-tutorial/mitel-cloudlink-enter-certificate.png)
 
 10. In the **Set up Mitel Connect** section on the **SAML-based sign-on** page of the Azure portal:
 
      1. Copy the URL from the **Login URL** field and paste it into the **Sign-in URL** field in the CloudLink Accounts portal.
 
      1. Copy the URL from the **Azure AD Identifier** field and paste it into the **IDP Identifier (Entity ID)** field in the CloudLink Accounts portal.
 
-        ![image](./media/mitel-connect-tutorial/mitel-cloudlink-copy-settings.png)
+        ![Screenshot shows the source for the values described here in Mintel Connect.](./media/mitel-connect-tutorial/mitel-cloudlink-copy-settings.png)
 
 11. Select **Save** on the **Azure AD Single Sign On** panel in the CloudLink Accounts portal.
 

articles/active-directory/saas-apps/mixpanel-tutorial.md

@@ -125,15 +125,15 @@ To configure Azure AD single sign-on with Mixpanel, perform the following steps:
 
 3. Click the **Access security** tab, and then click **Change settings**.
 
-    ![Mixpanel Settings](./media/mixpanel-tutorial/tutorial_mixpanel_08.png) 
+    ![Screenshot shows the Access security tab where you can change settings.](./media/mixpanel-tutorial/tutorial_mixpanel_08.png) 
 
 4. On the **Change your certificate** dialog page, click **Choose file** to upload your downloaded certificate, and then click **NEXT**.
 
-    ![Mixpanel Settings](./media/mixpanel-tutorial/tutorial_mixpanel_09.png) 
+    ![Screenshot shows the Change your certificate dialog box where you can choose a certificate file.](./media/mixpanel-tutorial/tutorial_mixpanel_09.png) 
 
 5.  In the authentication URL textbox on the **Change your authentication  URL** dialog page, paste the value of **Login URL** which you have copied from Azure portal, and then click **NEXT**.
 
-	![Mixpanel Settings](./media/mixpanel-tutorial/tutorial_mixpanel_10.png) 
+	![Screenshot shows the Change your authentication U R L pane where you can copy your Login U R L.](./media/mixpanel-tutorial/tutorial_mixpanel_10.png) 
 
 6. Click **Done**.
 
@@ -200,7 +200,7 @@ The objective of this section is to create a user called Britta Simon in Mixpane
 
 4. In the **team member** textbox, type Britta's email address in the Azure.
 
-    ![Mixpanel Settings](./media/mixpanel-tutorial/tutorial_mixpanel_11.png) 
+    ![Screenshot shows the Team tab where you add an address to Invite.](./media/mixpanel-tutorial/tutorial_mixpanel_11.png) 
 
 5. Click **Invite**. 
 

articles/active-directory/saas-apps/mobi-tutorial.md

@@ -93,7 +93,7 @@ To configure Azure AD single sign-on with MOBI, perform the following steps:
 
 4. On the **Basic SAML Configuration** section, If you wish to configure the application in **IDP** initiated mode, perform the following steps:
 
-    ![MOBI Domain and URLs single sign-on information](common/idp-intiated.png)
+    ![Screenshot shows the Basic SAML Configuration, where you can enter Identifier, Reply U R L, and select Save.](common/idp-intiated.png)
 
     a. In the **Identifier** text box, type a URL using the following pattern:
     `https://<subdomain>.thefutureis.mobi`
@@ -103,7 +103,7 @@ To configure Azure AD single sign-on with MOBI, perform the following steps:
 
 5. Click **Set additional URLs** and perform the following step if you wish to configure the application in **SP** initiated mode:
 
-    ![MOBI Domain and URLs single sign-on information](common/metadata-upload-additional-signon.png)
+    ![Screenshot shows Set additional U R Ls where you can enter a Sign on U R L.](common/metadata-upload-additional-signon.png)
 
     In the **Sign-on URL** text box, type a URL using the following pattern:
     `https://<subdomain>.thefutureis.mobi/login`