[carlospolop]

Change

Correct the API Management developer portal SSO source heading and its catalog link. The technique requires Microsoft.ApiManagement/service/users/generateSsoUrl/action, while the separate users/token/action operation returns a shared access token.

Scope

Two files: the API Management privilege escalation article and the matching canonical YAML entry. The technique's required permission and evaluation conditions stay the same.

Validation

The YAML anchor points to the matching article heading. The catalog still records generateSsoUrl/action for this technique and token/action for the separate shared token technique.

Microsoft references: https://learn.microsoft.com/en-us/azure/role-based-access-control/permissions/integration and https://learn.microsoft.com/en-us/rest/api/apimanagement/user/generate-sso-url?view=rest-apimanagement-2024-05-01

[carlospolop]

Decision: close

Not merge-ready after the review and repair attempts: unsupported_or_incomplete_documentary_scope: legitimate maintenance and large PRs need manual review, not article-filter closure

Head: faccc69f7e03605696c415d78424eb378f65d55d