Merge pull request #16185 from MicrosoftDocs/main

Publish main to live, Monday 10:30AM PDT, 09/23

Author: Stacyrch140

memdocs/intune/enrollment/multi-factor-authentication.md

@@ -90,7 +90,7 @@ Complete these steps to enable multi-factor authentication during Microsoft Intu
 After you apply and deploy this policy, users will see a one-time MFA prompt when they enroll their device. 
 
 > [!NOTE]
-> A second device is required to complete the MFA challenge for these types of corporate-owned devices:  
+> A second device or a Temporary Access Pass is required to complete the MFA challenge for these types of corporate-owned devices:  
 >
 > - Android Enterprise fully managed devices  
 > - Android Enterprise corporate-owned devices with a work profile  

memdocs/intune/enrollment/web-based-device-enrollment-ios.md

@@ -8,7 +8,7 @@ keywords:
 author: Lenewsad
 ms.author: lanewsad
 manager: dougeby
-ms.date: 05/15/2024
+ms.date: 09/23/2024
 ms.topic: conceptual
 ms.service: microsoft-intune
 ms.subservice: enrollment
@@ -81,14 +81,14 @@ When an employee attempts to sign into a work app on their personal device, the
 
 Alternatively, you can provide employees and students with a URL that opens the Company Portal website. If you aren't utilizing conditional access, it's important to share the enrollment link with device users so that they know how to initiate enrollment. The link to share is:  
 
- `portal.manage.microsoft.com/conditionalaccess/enrollment`   
+ `https://portal.manage.microsoft.com/enrollment/webenrollment/ios`   
 
 This section provides the high-level enrollment steps for device users. We recommend using this information in your organization's device onboarding documentation or for troubleshooting and support. 
 
 >[!IMPORTANT]
 > Safari browser is the only supported browser for this type of enrollment, and is needed to download the management profile and complete enrollment. If a user's default browser is anything other than Safari, they will need to copy the enrollment link and paste it into a Safari browser to initiate enrollment. After they complete enrollment, users can return to their preferred browser.  
 
-1. Open Safari and go to [https://portal.manage.microsoft.com/conditionalaccess/enrollment](https://portal.manage.microsoft.com/conditionalaccess/enrollment). Sign in with your work or school account.   
+1. Open Safari and go to [https://portal.manage.microsoft.com/enrollment/webenrollment/ios](https://portal.manage.microsoft.com/enrollment/webenrollment/ios). Sign in with your work or school account.   
 2. When prompted to, download the management profile. Wait in Safari while Company Portal downloads the management profile.  
 3. Go to your device settings app to view and install the management profile.  
 4. Wait until Microsoft Authenticator is installed on the device before signing into a work or school app. The device won't be ready for work use until Authenticator is on the device, which can take a few minutes. To verify that Authenticator installed, open your device settings and go to **Profile** > **Management Profile** > **Single Sign On Extension**. Authenticator should be listed as the SSO extension.  

memdocs/intune/remote-actions/device-activation-lock-disable.md

@@ -32,6 +32,8 @@ ms.collection:
 
 # Disable Activation Lock on Apple devices with Intune
 
+> [!TIP]
+> You can now turn off Activation Lock directly in Apple Business Manager and Apple School Manager. Learn more on [Apple's User Guide site.](https://support.apple.com/guide/apple-business-manager/axm812df1dd8/web)
 Microsoft Intune can help you manage Activation Lock, a feature of the Find My iPhone app for iOS/iPadOS and macOS devices. Activation Lock is enabled automatically when a user sets up the Find My iPhone app on a device. After it's enabled, the user's Apple ID and password must be entered before anyone can:
 
 - Turn off Find My iPhone
@@ -61,7 +63,7 @@ You can read more about Activation Lock on [Apple's web site](https://support.ap
 
 There are two methods to disabling Activation Lock on devices:
 
- - Manually entering the Activation Lock bypass code on the device
+- Manually entering the Activation Lock bypass code on the device
 
  - Using the Disable Activation Lock device action