|Service||Microsoft Docs article||Related commit history on GitHub||Change details|
|active-directory||My Ibisworld Tutorial||https://github.com/MicrosoftDocs/azure-docs/commits/master/articles/active-directory/saas-apps/my-ibisworld-tutorial.md||
Follow these steps to enable Azure AD SSO in the Azure portal.1. On the **Basic SAML Configuration** section, the user does not have to perform any step as the app is already pre-integrated with Azure.
-1. Click **Set additional URLs** and perform the following step if you wish to configure the application in **SP** initiated mode:-
- In the **Sign-on URL** text box, type the URL:
+ * To configure the application in **SP** initiated mode, request the URL from IBISWorld, and then enter the URL in the **Sign-on URL** text box.
+ * To configure the application in **IdP** initiated mode, in the **Relay State** text box, enter the URL `RPID=http://fedlogin.ibisworld.com`. Leave the **Sign-on URL** text box empty.1. Click **Save**. 1. My IBISWorld application expects the SAML assertions in a specific format, which requires you to add custom attribute mappings to your SAML token attributes configuration. The following screenshot shows the list of default attributes.
+ ![image](common/default-attributes.png)1. In addition to above, My IBISWorld application expects few more attributes to be passed back in SAML response which are shown below. These attributes are also pre populated but you can review them as per your requirements.
- | Name | Source Attribute|
- | | |
- | department | user.department |
- | language | user.preferredlanguage |
- | phone | user.telephonenumber |
- | title | user.jobtitle |
- | userid | user.employeeid |
- | country | user.country |
+ | Name | Source Attribute|
+ | | |
+ | department | user.department |
+ | language | user.preferredlanguage |
+ | phone | user.telephonenumber |
+ | title | user.jobtitle |
+ | userid | user.employeeid |
+ | country | user.country |1. On the **Set up single sign-on with SAML** page, In the **SAML Signing Certificate** section, click copy button to copy **App Federation Metadata Url** and save it on your computer.
When you click the My IBISWorld tile in the Access Panel, you should be automati- [What is session control in Microsoft Cloud App Security?](/cloud-app-security/proxy-intro-aad) -- [How to protect My IBISWorld with advanced visibility and controls](/cloud-app-security/proxy-intro-aad)
+- [How to protect My IBISWorld with advanced visibility and controls](/cloud-app-security/proxy-intro-aad)
|automation||Create Run As Account||https://github.com/MicrosoftDocs/azure-docs/commits/master/articles/automation/create-run-as-account.md||
The PowerShell script includes support for several configurations.2. Start PowerShell with elevated user rights and navigate to the folder that contains the script.
-3. Run one of the the following commands to create a Run As and/or Classic Run As account based on your requirements.
+3. Run one of the following commands to create a Run As and/or Classic Run As account based on your requirements.* Create a Run As account using a self-signed certificate.
The PowerShell script includes support for several configurations.* To learn more about graphical authoring, see [Author graphical runbooks in Azure Automation](automation-graphical-authoring-intro.md). * To get started with PowerShell runbooks, see [Tutorial: Create a PowerShell runbook](learn/automation-tutorial-runbook-textual-powershell.md).
-* To get started with a Python 3 runbook, see [Tutorial: Create a Python 3 runbook](learn/automation-tutorial-runbook-textual-python-3.md).
+* To get started with a Python 3 runbook, see [Tutorial: Create a Python 3 runbook](learn/automation-tutorial-runbook-textual-python-3.md).
|azure-app-configuration||Concept Enable Rbac||https://github.com/MicrosoftDocs/azure-docs/commits/master/articles/azure-app-configuration/concept-enable-rbac.md||
Azure provides the following Azure built-in roles for authorizing access to App- **Contributor**: Use this role to manage the App Configuration resource. While the App Configuration data can be accessed using access keys, this role does not grant direct access to the data using Azure AD. - **Reader**: Use this role to give read access to the App Configuration resource. This does not grant access to the resource's access keys, nor to the data stored in App Configuration.
-> Currently, the Azure portal supports only HMAC authentication to access App Configuration data. Azure AD authentication is not supported. Therefore, users of the Azure portal require the *Contributor* role to retrieve the access keys of the App Configuration resource. Granting *App Configuration Data Reader* or *App Configuration Data Owner* roles has no impact on access through the portal.- ## Next steps Learn more about using [managed identities](howto-integrate-azure-managed-service-identity.md) to administer your App Configuration service.
|azure-cache-for-redis||Cache Best Practices||https://github.com/MicrosoftDocs/azure-docs/commits/master/articles/azure-cache-for-redis/cache-best-practices.md||
If you would like to test how your code works under error conditions, consider u* **We recommend using Dv2 VM Series** for your client as they have better hardware and will give the best results. * Make sure the client VM you use has **at least as much compute and bandwidth* as the cache being tested. * **Test under failover conditions** on your cache. It's important to ensure that you don't performance test your cache only under steady state conditions. Also test under failover conditions and measure the CPU / Server Load on your cache during that time. You can initiate a failover by [rebooting the primary node](cache-administration.md#reboot). This will allow you to see how your application behaves in terms of throughput and latency during failover conditions (happens during updates and can happen during an unplanned event). Ideally you dont't want to see CPU / Server Load peak to more than say 80% even during a failover as that can affect performance.
+ * **Premium P2 and above** are hosted on VMs with 4 or more cores. This is useful to distribute the TLS encryption / decryption workload across multiple cores to bring down overall CPU usage. [See here for details around VM sizes and cores](cache-planning-faq.md#azure-cache-for-redis-performance)* **Enable VRSS** on the client machine if you are on Windows. [See here for details](/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn383582(v=ws.11)). Example PowerShell script: >PowerShell -ExecutionPolicy Unrestricted Enable-NetAdapterRSS -Name ( Get-NetAdapter).Name
Azure Front Door is offered for 3 different SKUs, [Azure Front Door](../front-do| URL rewrite | Yes | Yes | | Rules Engine | Yes | Yes | | Private Origin (Private Link) | No | Yes |
-| WAF | No | Yes |
+| WAF | Custom Rules only | Yes || Bot Protection | No | Yes | | Enhanced Metrics and diagnostics | Yes | Yes |
-| Traffic reports | Yes | Yes |
+| Traffic report | Yes | Yes || Security Report | No | Yes | ## Next steps
|openshift||Howto Create A Backup||https://github.com/MicrosoftDocs/azure-docs/commits/master/articles/openshift/howto-create-a-backup.md||
In this article, you'll prepare your environment to create an Azure Red Hat Open> * Setup the prerequisites and install the necessary tools > * Create an Azure Red Hat OpenShift 4 application backup
-> Velero does not back up Azure Red Hat OpenShift etcd key-value store data. If you need to backup etcd, see [Backing up etcd](https://docs.openshift.com/container-platform/4.5/backup_and_restore/backing-up-etcd.html).- If you choose to install and use the CLI locally, this tutorial requires that you are running the Azure CLI version 2.6.0 or later. Run `az --version` to find the version. If you need to install or upgrade, see [Install Azure CLI](/cli/azure/install-azure-cli?view=azure-cli-latest). ## Before you begin
|purview||Use Purview Studio||https://github.com/MicrosoftDocs/azure-docs/commits/master/articles/purview/use-purview-studio.md||
This article gives an overview of some of the main features of Azure Purview.The following list summarizes the main features of **Home page**. Each number in the list corresponds to a highlighted number in the preceding screenshot.
-1. Friendly name of the catalog. You can set catalog name in **Management Center** > **Account information*.
+1. Friendly name of the catalog. You can set catalog name in **Management Center** > **Account information**.2. Catalog analytics shows the number of: - Users, groups, and applications
Each UX in Azure Purview Studio will have guided tours to give overview of the p## Next steps > [!div class="nextstepaction"]
-> [Add a security principal](tutorial-scan-data.md)
+> [Add a security principal](tutorial-scan-data.md)
|service-bus-messaging||Service Bus Tutorial Topics Subscriptions Portal||https://github.com/MicrosoftDocs/azure-docs/commits/master/articles/service-bus-messaging/service-bus-tutorial-topics-subscriptions-portal.md||
To run the code, do the following:## Clean up resources
-When no longer needed, delete the namespace and queue. To do so, select these resources on the portal and click **Delete**.
+When no longer needed, delete the namespace and topic. To do so, select these resources on the portal and click **Delete**.## Understand the sample code
|service-fabric||Service Fabric Cluster Fabric Settings||https://github.com/MicrosoftDocs/azure-docs/commits/master/articles/service-fabric/service-fabric-cluster-fabric-settings.md||
The following is a list of Fabric settings that you can customize, organized by|EnableTelemetry |Bool, default is true | Dynamic |This is going to enable or disable telemetry. | |FailuresOnlyHttpTelemetry | Bool, default is false | Dynamic | If HTTP telemetry capture is enabled; capture only failed requests. This is to help cut down on the number of events generated for telemetry. | |HttpTelemetryCapturePercentage | int, default is 50 | Dynamic | If HTTP telemetry capture is enabled; capture only a random percentage of requests. This is to help cut down on the number of events generated for telemetry. |
-|MaxDiskQuotaInMB |Int, default is 65536 | Dynamic |Disk quota in MB for Windows Fabric log files. |
+|MaxDiskQuotaInMB |Int, default is 65536 | Dynamic |Disk quota in MB for Windows and Linux Fabric log files. ||ProducerInstances |String | Dynamic |The list of DCA producer instances. | ## DnsService
|virtual-machines||Os Upgrade Hana Large Instance||https://github.com/MicrosoftDocs/azure-docs/commits/master/articles/virtual-machines/workloads/sap/os-upgrade-hana-large-instance.md||
Operating system configuration can drift from the recommended settings over time| SuSE | SLES 12 SP3 | 3.2.3i | 188.8.131.52 | 184.108.40.206 | | SuSE | SLES 12 SP5 | 3.2.3i | 220.127.116.11 | 18.104.22.168 | | Red Hat | RHEL 7.2 | 3.1.3h | 22.214.171.124 | 126.96.36.199 |
+ | Red Hat | RHEL 7.6 | 3.2.3i | 188.8.131.52 | 184.108.40.206 |
+ | Red Hat | RHEL 7.6 | 4.1.1b | 220.127.116.11 | 18.104.22.168 |### Commands for driver upgrade and to clean old rpm packages