Merge branch 'main' into internaldomainfederation-update.md

FaithOmbongi · web-flow · commit 0208b579299c · 2024-12-27T20:59:19.000+03:00
diff --git a/api-reference/beta/resources/authenticationmethod.md b/api-reference/beta/resources/authenticationmethod.md
@@ -6,7 +6,7 @@ author: "jpettere"
 ms.reviewer: intelligentaccesspm
 ms.subservice: "entra-sign-in"
 doc_type: "resourcePageType"
-ms.date: 12/06/2024
+ms.date: 12/27/2024
 ---
 
 # authenticationMethod resource type
@@ -17,13 +17,15 @@ Namespace: microsoft.graph
 
 An abstract type that represents an authentication method registered to a user. An [authentication method](/azure/active-directory/authentication/concept-authentication-methods) is something used by a user to authenticate or otherwise prove their identity to the system. Some examples include password, phone (usable via SMS or voice call), FIDO2 security keys, and more.
 
+Inherits from [entity](../resources/entity.md).
+
 This resource type is an abstract type that's inherited by the following derived types:
 
 + [emailAuthenticationMethod](emailauthenticationmethod.md)
 + [fido2AuthenticationMethod](fido2authenticationmethod.md)
 + [hardwareOathAuthenticationMethod](hardwareOathAuthenticationMethod.md)
 + [microsoftAuthenticatorAuthenticationMethod](microsoftauthenticatorauthenticationmethod.md)
-+ [passwordlessMicrosoftAuthenticatorAuthenticationMethod](passwordlessmicrosoftauthenticatorauthenticationmethod.md)
++ [passwordlessMicrosoftAuthenticatorAuthenticationMethod](passwordlessmicrosoftauthenticatorauthenticationmethod.md) (deprecated)    
 + [passwordAuthenticationMethod](passwordauthenticationmethod.md)
 + [phoneAuthenticationMethod](phoneauthenticationmethod.md)
 + [softwareOathAuthenticationMethod](softwareoathauthenticationmethod.md)
@@ -44,7 +46,8 @@ This resource type is an abstract type that's inherited by the following derived
 
 | Property     | Type        | Description |
 |:-------------|:------------|:------------|
-|id|String| The identifier of this instance of an authentication method registered to this user. Read-only. |
+|id|String| The identifier of this instance of an authentication method registered to this user. Read-only. Inherited from [entity](../resources/entity.md). |
+|createdDateTime|DateTimeOffset| The date and time the authentication method was registered to the user. Read-only. Optional. This optional value is `null` if the authentication method doesn't populate it. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is `2014-01-01T00:00:00Z`.|
 
 ## Relationships
 
@@ -66,7 +69,8 @@ The following JSON representation shows the resource type.
 ```json
 {
   "@odata.type": "#microsoft.graph.authenticationMethod",
-  "id": "String (identifier)"
+  "id": "String (identifier)",
+  "createdDateTime": "String (timestamp)"
 }
 ```
 
diff --git a/api-reference/beta/resources/emailauthenticationmethod.md b/api-reference/beta/resources/emailauthenticationmethod.md
@@ -34,6 +34,7 @@ This is a derived type that inherits from the [authenticationMethod](authenticat
 |Property|Type|Description|
 |:---|:---|:---|
 |id|String|The identifier of the email address registered to this user. The ID is always `3ddfcfc8-9383-446f-83cc-3ab9be4be18f`.|
+|createdDateTime|DateTimeOffset| The date and time the authentication method was registered to the user. Read-only. Optional. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is `2014-01-01T00:00:00Z`.|
 |emailAddress|String|The email address registered to this user.|
 
 ## Relationships
@@ -52,6 +53,7 @@ The following JSON representation shows the resource type.
 ``` json
 {
   "@odata.type": "#microsoft.graph.emailAuthenticationMethod",
+  "createdDateTime": "String (timestamp)",
   "id": "String (identifier)",
   "emailAddress": "String"
 }
diff --git a/api-reference/beta/resources/hardwareoathauthenticationmethod.md b/api-reference/beta/resources/hardwareoathauthenticationmethod.md
@@ -35,6 +35,7 @@ Inherits from [authenticationMethod](../resources/authenticationmethod.md).
 ## Properties
 |Property|Type|Description|
 |:---|:---|:---|
+|createdDateTime|DateTimeOffset| The date and time the authentication method was registered to the user. Read-only. Optional. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is `2014-01-01T00:00:00Z`.|
 |id|String|Unique identifier for the device. Inherited from [entity](../resources/entity.md).|
 
 ## Relationships
@@ -55,6 +56,7 @@ The following JSON representation shows the resource type.
 ``` json
 {
   "@odata.type": "#microsoft.graph.hardwareOathAuthenticationMethod",
+  "createdDateTime": "String (timestamp)",
   "id": "String (identifier)",
 }
 ```
diff --git a/api-reference/beta/resources/microsoftauthenticatorauthenticationmethod.md b/api-reference/beta/resources/microsoftauthenticatorauthenticationmethod.md
@@ -59,7 +59,7 @@ The following JSON representation shows the resource type.
   "displayName": "String",
   "deviceTag": "String",
   "phoneAppVersion": "String",
-  "createdDateTime": "DateTimeOffset",
+  "createdDateTime": "String (timestamp)",
   "clientAppName": "microsoftAuthenticator"
 }
 ```
diff --git a/api-reference/beta/resources/passwordauthenticationmethod.md b/api-reference/beta/resources/passwordauthenticationmethod.md
@@ -43,8 +43,6 @@ None.
 
 The following JSON representation shows the resource type.
 
-The following JSON representation shows the resource type.
-
 <!-- {
   "blockType": "resource",
   "optionalProperties": [
diff --git a/api-reference/beta/resources/passwordlessmicrosoftauthenticatorauthenticationmethod.md b/api-reference/beta/resources/passwordlessmicrosoftauthenticatorauthenticationmethod.md
@@ -41,7 +41,6 @@ This is a derived type that inherits from the [authenticationMethod](authenticat
 
 
 The following JSON representation shows the resource type.
-The following is a JSON representation of the resource.
 <!-- {
   "blockType": "resource",
   "keyProperty": "id",
diff --git a/api-reference/beta/resources/phoneauthenticationmethod.md b/api-reference/beta/resources/phoneauthenticationmethod.md
@@ -42,6 +42,7 @@ This is a derived type that inherits from the [authenticationMethod](authenticat
 
 | Property     | Type        | Description |
 |:-------------|:------------|:------------|
+|createdDateTime|DateTimeOffset| The date and time the authentication method was registered to the user. Read-only. Optional. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is `2014-01-01T00:00:00Z`.|
 |id|String| The identifier of this phone registered to this user. Read-only. <br/><br/>The value of ID is one of the following:<ul><li>`b6332ec1-7057-4abe-9331-3d72feddfe41` - where **phoneType** is `alternateMobile`.</li><li>`e37fc753-ff3b-4958-9484-eaa9425c82bc` - where **phoneType** is `office`.</li><li>`3179e48a-750b-4051-897c-87b9720928f7` - where **phoneType** is `mobile`.</li>|
 |phoneNumber|String|The phone number to text or call for authentication. Phone numbers use the format "+\<country code\> \<number\>x\<extension\>", with extension optional. For example, +1 5555551234 or +1 5555551234x123 are valid. Numbers are rejected when creating/updating if they don't match the required format. |
 |phoneType|authenticationPhoneType|The type of this phone. Possible values are: `mobile`, `alternateMobile`, or `office`.|
@@ -90,6 +91,7 @@ The following JSON representation shows the resource type.
 ```json
 {
   "@odata.type": "#microsoft.graph.phoneAuthenticationMethod",
+  "createdDateTime": "String (timestamp)",
   "id": "String (identifier)",
   "phoneNumber": "String",
   "phoneType": "string",
diff --git a/api-reference/beta/resources/platformcredentialauthenticationmethod.md b/api-reference/beta/resources/platformcredentialauthenticationmethod.md
@@ -55,7 +55,7 @@ The following JSON representation shows the resource type.
   "@odata.type": "#microsoft.graph.platformCredentialAuthenticationMethod",
   "id": "String (Identifier)",
   "displayName": "String",
-  "createdDateTime": "String",
+  "createdDateTime": "String (timestamp)",
   "keyStrength": {"@odata.type": "microsoft.graph.authenticationMethodKeyStrength"},
   "platform": {"@odata.type": "microsoft.graph.authenticationMethodPlatform"}
 }
diff --git a/api-reference/beta/resources/softwareoathauthenticationmethod.md b/api-reference/beta/resources/softwareoathauthenticationmethod.md
@@ -31,6 +31,7 @@ This is a derived type that inherits from the [authenticationMethod](authenticat
 ## Properties
 |Property|Type|Description|
 |:---|:---|:---|
+|createdDateTime|DateTimeOffset| The date and time the authentication method was registered to the user. Read-only. Optional. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is `2014-01-01T00:00:00Z`.|
 |id|String|The authentication method identifier.|
 |secretKey|String|The secret key of the method. Always returns `null`.|
 
@@ -50,6 +51,7 @@ The following JSON representation shows the resource type.
 ``` json
 {
   "@odata.type": "#microsoft.graph.softwareOathAuthenticationMethod",
+  "createdDateTime": "String (timestamp)",
   "id": "String (identifier)",
   "secretKey": "String"
 }
diff --git a/api-reference/beta/resources/temporaryaccesspassauthenticationmethod.md b/api-reference/beta/resources/temporaryaccesspassauthenticationmethod.md
@@ -47,7 +47,6 @@ This is a derived type that inherits from the [authenticationMethod](authenticat
 None.
 
 The following JSON representation shows the resource type.
-The following is a JSON representation of the resource.
 <!-- {
   "blockType": "resource",
   "keyProperty": "id",
diff --git a/api-reference/beta/resources/windowshelloforbusinessauthenticationmethod.md b/api-reference/beta/resources/windowshelloforbusinessauthenticationmethod.md
@@ -41,7 +41,6 @@ This is a derived type that inherits from the [authenticationMethod](authenticat
 |device|[device](../resources/device.md)|The registered device on which this Windows Hello for Business key resides. Supports `$expand`. <br/><br/>When you get a user's Windows Hello for Business registration information, this property is returned only on a single GET and when you specify `?$expand`. For example, GET `/users/admin@contoso.com/authentication/windowsHelloForBusinessMethods/_jpuR-TGZtk6aQCLF3BQjA2?$expand=device`.|
 
 The following JSON representation shows the resource type.
-The following is a JSON representation of the resource.
 <!-- {
   "blockType": "resource",
   "keyProperty": "id",
@@ -55,7 +54,7 @@ The following is a JSON representation of the resource.
   "@odata.type": "#microsoft.graph.windowsHelloForBusinessAuthenticationMethod",
   "id": "String (Identifier)",
   "displayName": "String",
-  "createdDateTime": "String",
+  "createdDateTime": "String (timestamp)",
   "keyStrength": {"@odata.type": "microsoft.graph.authenticationMethodKeyStrength"}
 }
 ```
diff --git a/concepts/auth-v2-service.md b/concepts/auth-v2-service.md
@@ -265,5 +265,5 @@ Access the [Microsoft identity platform code samples](/entra/identity-platform/s
 
 ## Related content
 
-- Explore [Microsoft Graph tutorials](/graph/tutorials) to create basic applications that authenticate using certificate-based credentials to access data in app-only scenarios.
+- Explore [Microsoft Graph tutorials](/graph/tutorials) for code samples that are built using different SDKs to create basic applications that authenticate using certificate-based credentials to access data in app-only scenarios.
 - [Add a certificate to an app using Microsoft Graph](/graph/applications-how-to-add-certificate) shows a step-by-step process to add a certificate to an app for certificate-based authentication and app-only access to data.
diff --git a/concepts/auth-v2-user.md b/concepts/auth-v2-user.md
@@ -331,5 +331,5 @@ Microsoft has built and maintains a wide selection of code samples that demonstr
 
 ## Related content
 
-- You can call Microsoft Graph on behalf of a user from different types of apps, such as single-page apps, web apps, and mobile apps. For more information, see [Scenarios and supported authentication flows](/entra/identity-platform/authentication-flows-app-scenarios#scenarios-and-supported-authentication-flows).
-- Choose from code samples that are built and maintained by Microsoft to run custom apps that use supported authentication libraries, sign-in users, and call Microsoft Graph. See [Microsoft Graph tutorials](/graph/tutorials).
+- Explore [Microsoft Graph tutorials](/graph/tutorials) for code samples that are built using different SDKs to create basic applications that authenticate and access data in delegated scenarios.
+- Choose from code samples that are built using different SDKs and maintained by Microsoft to run custom apps that use supported authentication libraries, sign-in users, and call Microsoft Graph. See [Microsoft Graph tutorials](/graph/tutorials).
diff --git a/concepts/auth/auth-concepts.md b/concepts/auth/auth-concepts.md
@@ -16,7 +16,7 @@ ms.date: 12/19/2024
 
 Microsoft Graph is a protected API gateway for accessing data in Microsoft cloud services like Microsoft Entra ID and Microsoft 365. It's protected by the [Microsoft identity platform](/entra/identity-platform/v2-overview), which authorizes and verifies that an app is authorized to call Microsoft Graph.
 
-This article provides an overview of the requirements for an app to be authorized to access data via any Microsoft Graph API. If you're already familiar with how authentication and authorization works, explore [code samples](/entra/identity-platform/sample-v2-code) for apps that call Microsoft Graph APIs.
+This article provides an overview of the requirements for an app to be authorized to access data via any Microsoft Graph API. If you're already familiar with how authentication and authorization works, explore [Microsoft identity platform code samples](/entra/identity-platform/sample-v2-code) or [Microsoft Graph tutorials](/graph/tutorials) for apps that are built using different Microsoft Graph SDKs and that call Microsoft Graph APIs.
 
 ## Register the application
 
@@ -132,3 +132,4 @@ You can alternatively use the Microsoft identity platform endpoints directly wit
 
 - [Microsoft identity platform documentation](/entra/identity-platform/)
 - [Overview of Microsoft Graph permissions](/graph/permissions-overview)
+- [Microsoft Graph tutorials](/graph/tutorials)
diff --git a/concepts/change-notifications-overview.md b/concepts/change-notifications-overview.md
@@ -8,16 +8,14 @@ ms.topic: concept-article
 ms.subservice: change-notifications
 ms.localizationpriority: high
 ms.custom: graphiamtop20
-ms.date: 12/27/2023
+ms.date: 12/27/2024
 #customer intent: As a developer, I want to receive notifications of changes to specific Microsoft Graph resources, so that I can build apps that process the changes according to the business requirements.
 ---
 
 # Set up notifications for changes in resource data
 
 Change notifications enable applications to receive alerts when a Microsoft Graph resource they're interested in changes; that is, created, updated, or deleted. Microsoft Graph sends notifications to the specified client endpoint, and the client service processes the notifications according to the business requirements. For example, the service might fetch more data, update its cache and views, and so on.
 
-<!-- Add illustration-->
-
 ## Why get change notifications?
 
 Change notifications follow an event-driven model where customers receive alerts when changes occur instead of them polling Microsoft Graph. Depending on your business logic, change notifications are suitable when:
@@ -26,6 +24,12 @@ Change notifications follow an event-driven model where customers receive alerts
 - You need to react to changes in near real-time.
 - You want to avoid frequently polling Microsoft Graph which might cause you to hit the throttling limits.
 
+The following image shows how change notifications works and compares with [change tracking](./delta-query-overview.md).
+
+:::image type="content" source="images/change-notifications/change-notifications-vs-delta-query.png" alt-text="Illustration of change notifications and delta query services":::
+
+The following video provides an overview of change notifications in Microsoft Graph.
+
 > [!VIDEO https://www.youtube-nocookie.com/embed/rC1bunenaq4]
 
 ## Types of change notifications
diff --git a/concepts/images/change-notifications/change-notifications-vs-delta-query.png b/concepts/images/change-notifications/change-notifications-vs-delta-query.png
diff --git a/concepts/whats-new-overview.md b/concepts/whats-new-overview.md
@@ -38,10 +38,10 @@ Published the following lesser privileged permissions for managing specific scen
 
 | Permission | Comments |
 |--|--|
-| User-Mail.ReadWrite.All | Least privileged permission to update **otherMails** property. |
-| User-PasswordProfile.ReadWrite.All | Least privileged permission to update **passwordProfile** property. |
-| User-Phone.ReadWrite.All | Least privileged permission to update **businessPhones** and **mobilePhone** properties. Previously, only the *Directory.AccessAsUser.All* permission was supported to update the properties for admin user. We recommend you move the lesser privileged ** permission instead.|
-| User.EnableDisableAccount.All | Least privileged permission to update **accountEnabled** property. **Requires** *User.Read.All* permission as well. Previously, only the *Directory.AccessAsUser.All* permission was supported to update the account status for admin users. We recommend you move the lesser privileged permission instead.|
+| User-Mail.ReadWrite.All | Least privileged permission to update the **otherMails** property. |
+| User-PasswordProfile.ReadWrite.All | Least privileged permission to update the **passwordProfile** property. |
+| User-Phone.ReadWrite.All | Least privileged permission to update the **businessPhones** and **mobilePhone** properties. Previously, only the *Directory.AccessAsUser.All* permission was supported to update the properties for admin user. We recommend you move the lesser privileged permission instead.|
+| User.EnableDisableAccount.All | Least privileged permission to update the **accountEnabled** property. **Requires** *User.Read.All* permission as well. Previously, only the *Directory.AccessAsUser.All* permission was supported to update the account status for admin users. We recommend you move the lesser privileged permission instead.|
 | User.DeleteRestore.All | Least privileged permission to [delete a user](/graph/api/user-delete), [restore a deleted user from the recycle bin](/graph/api/directory-deleteditems-restore), or [permanently delete a deleted user from the recycle bin](/graph/api/directory-deleteditems-delete). Also allows retrieving deleted users via the `/directory/deleteditems/microsoft.graph.user` endpoint. |
 
 ## December 2024: New in preview only

Original file line number	Diff line number	Diff line change
`@@ -34,6 +34,7 @@ This is a derived type that inherits from the [authenticationMethod](authenticat`
`34`	`34`	`\|Property\|Type\|Description\|`
`35`	`35`	`\|:---\|:---\|:---\|`
`36`	`36`	\|id\|String\|The identifier of the email address registered to this user. The ID is always `3ddfcfc8-9383-446f-83cc-3ab9be4be18f`.\|
	`37`	+\|createdDateTime\|DateTimeOffset\| The date and time the authentication method was registered to the user. Read-only. Optional. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is `2014-01-01T00:00:00Z`.\|
`37`	`38`	`\|emailAddress\|String\|The email address registered to this user.\|`
`38`	`39`
`39`	`40`	`## Relationships`
`@@ -52,6 +53,7 @@ The following JSON representation shows the resource type.`
`52`	`53`	``` json
`53`	`54`	`{`
`54`	`55`	`"@odata.type": "#microsoft.graph.emailAuthenticationMethod",`
	`56`	`+ "createdDateTime": "String (timestamp)",`
`55`	`57`	`"id": "String (identifier)",`
`56`	`58`	`"emailAddress": "String"`
`57`	`59`	`}`
Original file line number	Diff line number	Diff line change
`@@ -35,6 +35,7 @@ Inherits from [authenticationMethod](../resources/authenticationmethod.md).`
`35`	`35`	`## Properties`
`36`	`36`	`\|Property\|Type\|Description\|`
`37`	`37`	`\|:---\|:---\|:---\|`
	`38`	+\|createdDateTime\|DateTimeOffset\| The date and time the authentication method was registered to the user. Read-only. Optional. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is `2014-01-01T00:00:00Z`.\|
`38`	`39`	`\|id\|String\|Unique identifier for the device. Inherited from [entity](../resources/entity.md).\|`
`39`	`40`
`40`	`41`	`## Relationships`
`@@ -55,6 +56,7 @@ The following JSON representation shows the resource type.`
`55`	`56`	``` json
`56`	`57`	`{`
`57`	`58`	`"@odata.type": "#microsoft.graph.hardwareOathAuthenticationMethod",`
	`59`	`+ "createdDateTime": "String (timestamp)",`
`58`	`60`	`"id": "String (identifier)",`
`59`	`61`	`}`
`60`	`62`	```
Original file line number	Diff line number	Diff line change
`@@ -59,7 +59,7 @@ The following JSON representation shows the resource type.`
`59`	`59`	`"displayName": "String",`
`60`	`60`	`"deviceTag": "String",`
`61`	`61`	`"phoneAppVersion": "String",`
`62`		`- "createdDateTime": "DateTimeOffset",`
	`62`	`+ "createdDateTime": "String (timestamp)",`
`63`	`63`	`"clientAppName": "microsoftAuthenticator"`
`64`	`64`	`}`
`65`	`65`	```
Original file line number	Diff line number	Diff line change
`@@ -55,7 +55,7 @@ The following JSON representation shows the resource type.`
`55`	`55`	`"@odata.type": "#microsoft.graph.platformCredentialAuthenticationMethod",`
`56`	`56`	`"id": "String (Identifier)",`
`57`	`57`	`"displayName": "String",`
`58`		`- "createdDateTime": "String",`
	`58`	`+ "createdDateTime": "String (timestamp)",`
`59`	`59`	`"keyStrength": {"@odata.type": "microsoft.graph.authenticationMethodKeyStrength"},`
`60`	`60`	`"platform": {"@odata.type": "microsoft.graph.authenticationMethodPlatform"}`
`61`	`61`	`}`
Original file line number	Diff line number	Diff line change
`@@ -31,6 +31,7 @@ This is a derived type that inherits from the [authenticationMethod](authenticat`
`31`	`31`	`## Properties`
`32`	`32`	`\|Property\|Type\|Description\|`
`33`	`33`	`\|:---\|:---\|:---\|`
	`34`	+\|createdDateTime\|DateTimeOffset\| The date and time the authentication method was registered to the user. Read-only. Optional. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is `2014-01-01T00:00:00Z`.\|
`34`	`35`	`\|id\|String\|The authentication method identifier.\|`
`35`	`36`	\|secretKey\|String\|The secret key of the method. Always returns `null`.\|
`36`	`37`
`@@ -50,6 +51,7 @@ The following JSON representation shows the resource type.`
`50`	`51`	``` json
`51`	`52`	`{`
`52`	`53`	`"@odata.type": "#microsoft.graph.softwareOathAuthenticationMethod",`
	`54`	`+ "createdDateTime": "String (timestamp)",`
`53`	`55`	`"id": "String (identifier)",`
`54`	`56`	`"secretKey": "String"`
`55`	`57`	`}`