MicrosoftDocs
diff --git a/‎docs/fundamentals/9-secure-access-teams-sharepoint.md
+1-1 b/‎docs/fundamentals/9-secure-access-teams-sharepoint.md
+1-1
diff --git a/‎docs/fundamentals/custom-security-attributes-add.md
+4-4 b/‎docs/fundamentals/custom-security-attributes-add.md
+4-4
diff --git a/‎docs/fundamentals/custom-security-attributes-manage.md
+2-2 b/‎docs/fundamentals/custom-security-attributes-manage.md
+2-2
diff --git a/‎docs/fundamentals/whats-new-archive.md
+1-1 b/‎docs/fundamentals/whats-new-archive.md
+1-1
diff --git a/‎docs/id-governance/privileged-identity-management/azure-pim-resource-rbac.md
+1-1 b/‎docs/id-governance/privileged-identity-management/azure-pim-resource-rbac.md
+1-1
diff --git a/‎docs/id-governance/privileged-identity-management/groups-activate-roles.md
+3-3 b/‎docs/id-governance/privileged-identity-management/groups-activate-roles.md
+3-3
diff --git a/‎docs/id-governance/privileged-identity-management/groups-approval-workflow.md
+1-1 b/‎docs/id-governance/privileged-identity-management/groups-approval-workflow.md
+1-1
diff --git a/‎docs/id-governance/privileged-identity-management/groups-assign-member-owner.md
+2-2 b/‎docs/id-governance/privileged-identity-management/groups-assign-member-owner.md
+2-2
diff --git a/‎docs/id-governance/privileged-identity-management/groups-audit.md
+2-2 b/‎docs/id-governance/privileged-identity-management/groups-audit.md
+2-2
diff --git a/‎docs/id-governance/privileged-identity-management/groups-discover-groups.md
+1-1 b/‎docs/id-governance/privileged-identity-management/groups-discover-groups.md
+1-1
diff --git a/‎docs/id-governance/privileged-identity-management/groups-role-settings.md
+1-1 b/‎docs/id-governance/privileged-identity-management/groups-role-settings.md
+1-1
diff --git a/‎docs/id-governance/privileged-identity-management/pim-how-to-add-role-to-user.md
+1-1 b/‎docs/id-governance/privileged-identity-management/pim-how-to-add-role-to-user.md
+1-1
diff --git a/‎docs/id-governance/privileged-identity-management/pim-how-to-change-default-settings.md
+1-1 b/‎docs/id-governance/privileged-identity-management/pim-how-to-change-default-settings.md
+1-1
diff --git a/‎docs/id-governance/privileged-identity-management/pim-resource-roles-configure-role-settings.md
+1-1 b/‎docs/id-governance/privileged-identity-management/pim-resource-roles-configure-role-settings.md
+1-1
diff --git a/‎docs/identity-platform/troubleshoot-publisher-verification.md
+2-2 b/‎docs/identity-platform/troubleshoot-publisher-verification.md
+2-2
diff --git a/‎docs/identity/app-provisioning/configure-automatic-user-provisioning-portal.md
+3-2 b/‎docs/identity/app-provisioning/configure-automatic-user-provisioning-portal.md
+3-2
diff --git a/‎docs/identity/app-provisioning/customize-application-attributes.md
+4-3 b/‎docs/identity/app-provisioning/customize-application-attributes.md
+4-3
diff --git a/‎docs/identity/app-provisioning/use-scim-to-provision-users-and-groups.md
+4-5 b/‎docs/identity/app-provisioning/use-scim-to-provision-users-and-groups.md
+4-5
diff --git a/‎docs/identity/app-proxy/application-proxy-configure-native-client-application.md
+2-3 b/‎docs/identity/app-proxy/application-proxy-configure-native-client-application.md
+2-3
@@ -31,7 +31,7 @@ Sharing in Microsoft 365 is partially governed by the **External Identities, Ext
 
 Learn more:
 
-* [Azure Active Directory admin center](https://aad.portal.azure.com/)
+* [Azure portal](https://portal.azure.com/)
 * [External Identities in Azure AD](../external-identities/external-identities-overview.md)
 
 ### Guest user access
 
@@ -35,7 +35,7 @@ To add or deactivate custom security attributes, you must have:
 
 An attribute set is a collection of related attributes. All custom security attributes must be part of an attribute set. Attribute sets cannot be renamed or deleted.
 
-1. Sign in to the [Azure portal](https://portal.azure.com) or [Azure AD admin center](https://aad.portal.azure.com).
+1. Sign in to the [Azure portal](https://portal.azure.com).
 
 1. Click **Azure Active Directory** > **Custom security attributes (Preview)**.
 
@@ -55,7 +55,7 @@ An attribute set is a collection of related attributes. All custom security attr
 
 ## Add a custom security attribute
 
-1. Sign in to the [Azure portal](https://portal.azure.com) or [Azure AD admin center](https://aad.portal.azure.com).
+1. Sign in to the [Azure portal](https://portal.azure.com).
 
 1. Click **Azure Active Directory** > **Custom security attributes (Preview)**.
 
@@ -110,7 +110,7 @@ An attribute set is a collection of related attributes. All custom security attr
 
 Once you add a new custom security attribute, you can later edit some of the properties. Some properties are immutable and cannot be changed.
 
-1. Sign in to the [Azure portal](https://portal.azure.com) or [Azure AD admin center](https://aad.portal.azure.com).
+1. Sign in to the [Azure portal](https://portal.azure.com).
 
 1. Click **Azure Active Directory** > **Custom security attributes (Preview)**.
 
@@ -128,7 +128,7 @@ Once you add a new custom security attribute, you can later edit some of the pro
 
 Once you add a custom security attribute, you can't delete it. However, you can deactivate a custom security attribute.
 
-1. Sign in to the [Azure portal](https://portal.azure.com) or [Azure AD admin center](https://aad.portal.azure.com).
+1. Sign in to the [Azure portal](https://portal.azure.com).
 
 1. Click **Azure Active Directory** > **Custom security attributes (Preview)**.
 
 
@@ -112,7 +112,7 @@ To grant access to the appropriate people, follow these steps to assign one of t
 
 #### Azure portal
 
-1. Sign in to the [Azure portal](https://portal.azure.com) or [Azure AD admin center](https://aad.portal.azure.com).
+1. Sign in to the [Azure portal](https://portal.azure.com).
 
 1. Click **Azure Active Directory**.
 
@@ -160,7 +160,7 @@ Content-type: application/json
 
 #### Azure portal
 
-1. Sign in to the [Azure portal](https://portal.azure.com) or [Azure AD admin center](https://aad.portal.azure.com).
+1. Sign in to the [Azure portal](https://portal.azure.com).
 
 1. Click **Azure Active Directory**.
 
 
@@ -9427,7 +9427,7 @@ For more information, see [My Apps Secure Sign-in Extension](https://support.mic
 **Service category:** Azure AD
 **Product capability:** Directory
 
-As of January 8, 2018, the Azure AD administration experience in the Azure classic portal has been retired. This took place in conjunction with the retirement of the Azure classic portal itself. In the future, you should use the [Azure AD admin center](https://aad.portal.azure.com) for all your portal-based administration of Azure AD.
+As of January 8, 2018, the Azure AD administration experience in the Azure classic portal has been retired. This took place in conjunction with the retirement of the Azure classic portal itself. In the future, you should use the [Azure portal](https://portal.azure.com) for all your portal-based administration of Azure AD.
 
 ---
 
 
@@ -111,7 +111,7 @@ My audit enables you to view your personal role activity.
 
 ## Get reason, approver, and ticket number for approval events
 
-1. Sign in to the [Azure portal](https://aad.portal.azure.com) with Privileged Role administrator role permissions, and open Azure AD.
+1. Sign in to the [Azure portal](https://portal.azure.com) with Privileged Role administrator role permissions, and open Azure AD.
 1. Select **Audit logs**.
 1. Use the **Service** filter to display only audit events for the Privileged identity Management service. On the **Audit logs** page, you can:
 
 
@@ -27,7 +27,7 @@ This article is for eligible members or owners who want to activate their group
 
 When you need to take on a group membership or ownership, you can request activation by using the **My roles** navigation option in PIM.
 
-1. [Sign in to Azure AD portal](https://aad.portal.azure.com).
+1. [Sign in to the Azure portal](https://portal.azure.com).
 
 1. Select **Azure AD Privileged Identity Management -> My roles -> Groups (Preview)**.
     >[!NOTE]
@@ -55,7 +55,7 @@ If the [role requires approval](pim-resource-roles-approval-workflow.md) to acti
 
 You can view the status of your pending requests to activate. It is specifically important when your requests undergo approval of another person.
 
-1. [Sign in to Azure AD portal](https://aad.portal.azure.com).
+1. [Sign in to the Azure portal](https://portal.azure.com).
 
 1. Select **Azure AD Privileged Identity Management -> My requests -> Groups (Preview)**. 
 
@@ -66,7 +66,7 @@ You can view the status of your pending requests to activate. It is specifically
 
 ## Cancel a pending request
 
-1. [Sign in to Azure AD portal](https://aad.portal.azure.com).
+1. [Sign in to the Azure portal](https://portal.azure.com).
 
 1. Select **Azure AD Privileged Identity Management -> My requests -> Groups (Preview)**. 
 
 
@@ -26,7 +26,7 @@ Follow the steps in this article to approve or deny requests for group membershi
 
 As a delegated approver, you'll receive an email notification when an Azure resource role request is pending your approval. You can view pending requests in Privileged Identity Management.
 
-1. [Sign in to Azure AD portal](https://aad.portal.azure.com).
+1. [Sign in to the Azure portal](https://portal.azure.com).
 
 1. Select **Azure AD Privileged Identity Management -> Approve requests -> Groups (Preview)**. 
 
 
@@ -33,7 +33,7 @@ When a membership or ownership is assigned, the assignment:
 
 Follow these steps to make a user eligible member or owner of a group. You will need to have Global Administrator, Privileged Role Administrator role, or be an Owner of the group.
 
-1. [Sign in to Azure AD](https://aad.portal.azure.com).
+1. [Sign in to the Azure portal](https://portal.azure.com).
 
 1. Select **Azure AD Privileged Identity Management -> Groups (Preview)** and view groups that are already enabled for PIM for Groups.
 
@@ -73,7 +73,7 @@ Follow these steps to make a user eligible member or owner of a group. You will
 
 Follow these steps to update or remove an existing role assignment. You will need to have Global Administrator, Privileged Role Administrator role, or Owner role of the group.
 
-1. [Sign in to Azure AD](https://aad.portal.azure.com) with appropriate role permissions.
+1. [Sign in to the Azure portal](https://portal.azure.com) with appropriate role permissions.
 
 1. Select **Azure AD Privileged Identity Management -> Groups (Preview)** and view groups that are already enabled for PIM for Groups.
 
 
@@ -28,7 +28,7 @@ Follow these steps to view the audit history for groups in Privileged Identity M
 
 **Resource audit** gives you a view of all activity associated with groups in PIM.
 
-1. [Sign in to Azure AD portal](https://aad.portal.azure.com).
+1. [Sign in to the Azure portal](https://portal.azure.com).
 
 1. Select **Azure AD Privileged Identity Management -> Groups (Preview)**. 
 
@@ -44,7 +44,7 @@ Follow these steps to view the audit history for groups in Privileged Identity M
 
 **My audit** enables you to view your personal role activity for groups in PIM.
 
-1. [Sign in to Azure AD portal](https://aad.portal.azure.com).
+1. [Sign in to the Azure portal](https://portal.azure.com).
 
 1. Select **Azure AD Privileged Identity Management -> Groups (Preview)**. 
 
 
@@ -29,7 +29,7 @@ Dynamic groups and groups synchronized from on-premises environment cannot be ma
 You should either be a group Owner, have Global Administrator role, or Privileged Role Administrator role to bring the group under management with PIM.
 
 
-1. [Sign in to Azure AD](https://aad.portal.azure.com).
+1. [Sign in to the Azure portal](https://portal.azure.com).
 
 1. Select **Azure AD Privileged Identity Management -> Groups (Preview)** and view groups that are already enabled for PIM for Groups.
 
 
@@ -27,7 +27,7 @@ You need to have Global Administrator, Privileged Role Administrator, or group O
 
 Follow these steps to open the settings for a group role. 
 
-1. [Sign in to Azure AD portal](https://aad.portal.azure.com).
+1. [Sign in to the Azure portal](https://portal.azure.com).
 
 1. Select **Azure AD Privileged Identity Management -> Groups (Preview)**. 
 
 
@@ -74,7 +74,7 @@ Follow these steps to make a user eligible for an Azure AD admin role.
 
 For certain roles, the scope of the granted permissions can be restricted to a single admin unit, service principal, or application. This procedure is an example if assigning a role that has the scope of an administrative unit. For a list of roles that support scope via administrative unit, see [Assign scoped roles to an administrative unit](../roles/admin-units-assign-roles.md). This feature is currently being rolled out to Azure AD organizations.
 
-1. Sign in to the [Azure Active Directory admin center](https://aad.portal.azure.com) with Privileged Role Administrator permissions.
+1. Sign in to the [Azure portal](https://portal.azure.com) with Privileged Role Administrator permissions.
 
 1. Select **Azure Active Directory** > **Roles and administrators**.
 
 
@@ -28,7 +28,7 @@ PIM role settings are also known as “PIM Policies”.
 
 Follow these steps to open the settings for an Azure AD role.
 
-1. [Sign in to Azure AD](https://aad.portal.azure.com/) 
+1. [Sign in to the Azure portal](https://portal.azure.com/)
 
 1. Select **Azure AD Privileged Identity Management -> Azure AD Roles -> Roles**. On this page you can see list of Azure AD roles available in the tenant, including built-in and custom roles.
     :::image type="content" source="media/pim-how-to-change-default-settings/role-settings.png" alt-text="Screenshot of the list of Azure AD roles available in the tenant, including built-in and custom roles." lightbox="media/pim-how-to-change-default-settings/role-settings.png":::
 
@@ -28,7 +28,7 @@ PIM role settings are also known as “PIM Policies”.
 
 Follow these steps to open the settings for an Azure resource role.
 
-1. [Sign in to Azure AD](https://aad.portal.azure.com/) 
+1. [Sign in to the Azure portal](https://portal.azure.com/)
 
 1. Select **Azure AD Privileged Identity Management -> Azure Resources**. On this page you can see list of Azure resources discovered in PIM. Use Resource type filter to select all required resource types.
 
 
@@ -35,8 +35,8 @@ Below are some common issues that may occur during the process.
     4. Navigate to the [partner profile page](https://partner.microsoft.com/pcv/accountsettings/connectedpartnerprofile) where the MPN ID and primary account contact will be listed.
 
 - **I don’t know who my Azure AD Global Administrator (also known as company admin or tenant admin) is, how do I find them? What about the Application Administrator or Cloud Application Administrator?**
-    1. Sign in to the [Azure AD Portal](https://aad.portal.azure.com) using a user account in your organization's primary tenant.
-    2. Navigate to [Role Management](https://aad.portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/RolesAndAdministrators).
+    1. Sign in to the [Azure portal](https://portal.azure.com) using a user account in your organization's primary tenant.
+    1. Browse to **Azure Active Directory** > [Roles and administrators](https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/RolesAndAdministrators).
     3. Select the desired admin role.
     4. The list of users assigned that role will be displayed.
 
 
@@ -24,8 +24,9 @@ This article describes the general steps for managing automatic user account pro
 
 Use the Azure Active Directory portal to view and manage all applications that are configured for single sign-on in a directory. Enterprise apps are apps that are deployed and used within your organization. Follow these steps to view and manage your enterprise applications:
 
-1. Open the [Azure Active Directory portal](https://aad.portal.azure.com).
-1. Select **Enterprise applications** from the left pane. A list of all configured apps is shown, including apps that were added from the gallery.
+1. Open the [Azure portal](https://portal.azure.com).
+1. Browse to **Azure Active Directory** > **Enterprise applications**.
+1. A list of all configured apps is shown, including apps that were added from the gallery.
 1. Select any app to load its resource pane, where you can view reports and manage app settings.
 1. Select **Provisioning** to manage user account provisioning settings for the selected app.
 
 
@@ -29,8 +29,9 @@ You can customize the default attribute-mappings according to your business need
 
 Follow these steps to access the **Mappings** feature of user provisioning:
 
-1. Sign in to the [Azure Active Directory portal](https://aad.portal.azure.com).
-1. Select **Enterprise applications** from the left pane. A list of all configured apps is shown, including apps that were added from the gallery.
+1. Sign in to the [Azure portal](https://portal.azure.com).
+1. Browse to **Azure Active Directory** > **Enterprise applications**.
+1. A list of all configured apps is shown, including apps that were added from the gallery.
 1. Select any app to load its app management pane, where you can view reports and manage app settings.
 1. Select **Provisioning** to manage user account provisioning settings for the selected app.
 1. Expand **Mappings** to view and edit the user attributes that flow between Azure AD and the target application. If the target application supports it, this section lets you optionally configure provisioning of groups and user accounts.
@@ -142,7 +143,7 @@ When you are editing the list of supported attributes, the following properties
 
 #### Provisioning a custom extension attribute to a SCIM compliant application
 The SCIM RFC defines a core user and group schema, while also allowing for extensions to the schema to meet your application's needs. To add a custom attribute to a SCIM application:
-   1. Sign in to the [Azure Active Directory portal](https://aad.portal.azure.com), select **Enterprise Applications**, select your application, and then select **Provisioning**.
+   1. Sign in to the [Azure portal](https://portal.azure.com), select **Enterprise Applications**, select your application, and then select **Provisioning**.
    2. Under **Mappings**, select the object (user or group) for which you'd like to add a custom attribute.
    3. At the bottom of the page, select **Show advanced options**.
    4. Select **Edit attribute list for AppName**.
 
@@ -1308,8 +1308,9 @@ Applications that support the SCIM profile described in this article can be conn
 
 **To connect an application that supports SCIM:**
 
-1. Sign in to the [Azure AD portal](https://aad.portal.azure.com). You can get access a free trial for Azure AD with P2 licenses by signing up for the [developer program](https://developer.microsoft.com/microsoft-365/dev-program))
-1. Select **Enterprise applications** from the left pane. A list of all configured apps is shown, including apps that were added from the gallery.
+1. Sign in to the [Azure portal](https://portal.azure.com). You can get access a free trial for Azure AD with P2 licenses by signing up for the [developer program](https://developer.microsoft.com/microsoft-365/dev-program))
+1. Browse to **Azure Active Directory** > **Enterprise applications**.
+1. A list of all configured apps is shown, including apps that were added from the gallery.
 1. Select **+ New application** > **+ Create your own application**.
 1. Enter a name for your application, choose the option "*integrate any other application you don't find in the gallery*" and select **Add** to create an app object. The new app is added to the list of enterprise applications and opens to its app management screen.
 
@@ -1397,9 +1398,7 @@ The provisioning service supports the [authorization code grant](https://tools.i
 > [!NOTE]
 > OAuth v1 is not supported due to exposure of the client secret. OAuth v2 is supported.  
 
-Best practices (recommended, but not required):
-* Support multiple redirect URLs. Administrators can configure provisioning from both "portal.azure.com" and "aad.portal.azure.com". Supporting multiple redirect URLs will ensure that users can authorize access from either portal.
-* Support multiple secrets for easy renewal, without downtime. 
+Supportting multiple secrets for easy renewal, without downtime is recommended, but not required.
 
 #### How to set up OAuth code grant flow
 
 
@@ -33,9 +33,8 @@ Publish your proxy application as you would any other application and assign use
 
 You now need to register your application in Azure AD, as follows:
 
-1. Sign in to the [Azure Active Directory portal](https://aad.portal.azure.com/). The **Dashboard** for the **Azure Active Directory admin center** appears.
-1. In the sidebar, select **Azure Active Directory**. The **Azure Active Directory** overview page appears.
-1. In the Azure AD overview sidebar, select **App registrations**. The list of all app registrations appears.
+1. Sign in to the [Azure portal](https://portal.azure.com).
+1. Browse to **Azure Active Directory** > **App registrations**. The list of all app registrations appears.
 1. Select **New registration**. The **Register an application** page appears.
 
    ![Create a new app registration in the Azure portal](./media/application-proxy-configure-native-client-application/create.png)