Fixes on 3rd party pages

src/pages/manage/team/entra-id-app-enablement.mdx

@@ -7,24 +7,34 @@ Before your organization can use Microsoft Entra ID features with NetBird, such
 ## Prerequisites
 
 - A Microsoft Entra ID tenant
-- An account with **Global Administrator** or **Cloud Application Administrator** role
+- An account with the **Privileged Role Administrator** or **Global Administrator** role
+
+<Note>
+    **Cloud Application Administrator may not be enough.** Microsoft allows that role to grant consent for any
+    API *except* Microsoft Graph application permissions. NetBird's provisioning and group sync read directory
+    data through Microsoft Graph, so if the consent screen lists Graph application permissions, the grant has to
+    come from a **Privileged Role Administrator** or a **Global Administrator**.
+</Note>
 
 ## Step 1: Find the NetBird Enterprise Application
 
-1. Sign in to the [Azure portal](https://portal.azure.com)
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com)
-2. Navigate to **Home** → **Microsoft Entra ID** → **Enterprise Applications**
+2. Navigate to **Entra ID** → **Enterprise apps** → **All applications**
 3. Search for the application with Application ID: `7a7538de-b7ed-4e49-befe-edbe74d5e0a1`
 4. Select the **NetBird** application from the results
 
+You can reach the same blade from the [Azure portal](https://portal.azure.com) under
+**Microsoft Entra ID** → **Enterprise applications**.
+
 <p>
     <img src="/docs-static/img/manage/team/entra-id-app-enablement/enterprise-applications.png" alt="Find NetBird in Enterprise Applications" className="imagewrapper-big"/>
 </p>
 
 ## Step 2: Grant Admin Consent
 
-1. In the NetBird application overview, click **Permissions** in the left menu
+1. In the NetBird application overview, select **Permissions** under **Security**
-2. Click **Grant admin consent for Default Directory**
+2. Review the requested permissions carefully, then click **Grant admin consent for `<your tenant name>`**
-3. Review the requested permissions and confirm
+3. Confirm the consent prompt
 
 <p>
     <img src="/docs-static/img/manage/team/entra-id-app-enablement/grant-admin-consent.png" alt="Grant admin consent for NetBird" className="imagewrapper-big"/>

src/pages/manage/team/idp-sync/google-workspace-sync.mdx

@@ -110,7 +110,7 @@ Navigate to [https://console.cloud.google.com/apis/credentials](https://console.
 ![Google Workspace Service Account](/docs-static/img/manage/team/idp-sync/google-workspace-sync/rDU0Puv.png)
 
 Complete the form with the supplied values:
-* `NerBird` for the service account name
+* `NetBird` for the service account name
 * `netbird` for the service account ID
 
 Click `DONE` when ready.

src/pages/manage/team/single-sign-on/auth0.mdx

@@ -13,12 +13,19 @@ You can use Auth0 as your Identity Provider with NetBird, but it will require so
 
 2. Click **+ Create Application**
 
-3. Enter **NetBird** as the name, select **Single Page Web Applications** as the application type and click **Create**
+3. Enter **NetBird** as the name, select **Regular Web Applications** as the application type and click **Create**
 
 <p>
     <img src="/docs-static/img/manage/team/single-sign-on/auth0-idp/application-create.png" alt="auth0-application-create" className="imagewrapper-big"/>
 </p>
 
+<Note>
+    The application type has to be **Regular Web Applications**. NetBird exchanges the authorization code
+    server-side using a Client Secret, which makes this a confidential client. Auth0 treats single-page and
+    native apps as public clients and does not show a Credentials tab for them, so those types never issue the
+    Client Secret you record in step 5.
+</Note>
+
 4. On the New Application screen, go to the Settings tab and under Application URIs set the following values:
 - **Application Login URI**: `https://app.netbird.io`
 - **Allowed Callback URLs**: `https://login.netbird.io/login/callback`

src/pages/manage/team/single-sign-on/jumpcloud.mdx

@@ -9,7 +9,7 @@ You can use JumpCloud as your Identity Provider with NetBird, but it will requir
     The Free plan supports Google, Microsoft, and social logins.
 </Note>
 
-1. Access JumpCloud and navigate to USER AUTHENTICATION > SSO Applications
+1. In the JumpCloud Admin Console, navigate to **Access** > **SSO Applications**
 
 2. Click + Add New Application, select Custom Application and click Next
 
@@ -43,6 +43,11 @@ You can use JumpCloud as your Identity Provider with NetBird, but it will requir
 
 9. Record the Client ID and Client Secret that JumpCloud generates for your application.
 
+<Note>
+  JumpCloud shows the Client ID and Secret only once, right after you click activate. Copy them before closing the window, otherwise you have to regenerate the secret.
+</Note>
+
+
 10. Share your Client ID and Client Secret with our team, along with the region your JumpCloud console is in (US, EU, or India). Please use a secure method for sharing this information.
 
 <Note>