CmdID

CmdID / PowerShell / Cmdlets / Add

Add-AdfsRelyingPartyTrust

Adds a new relying party trust to the Federation Service. Windows Server PowerShell reference

From the Windows Server PowerShell reference 47 parameters Its page in the reference

Opens CmdID with your command, read as PowerShell. It is read in your browser and sent nowhere.

Parameters

47 in the Windows Server PowerShell reference
Show its 47 parameters
-AccessControlPolicyNameSpecifies the name of an access control policy.
-AccessControlPolicyParameters
-AdditionalAuthenticationRulesSpecifies the additional authorization rules to require additional authentication based on user, device and location attributes after the completion of the first step of authentication.
-AdditionalAuthenticationRulesFileSpecifies a file that contains the additional authentication rules to require additional authentication when a user is attempting to access this relying party.
-AdditionalWSFedEndpointSpecifies an array of alternate return addresses for the application.
-AllowedAuthenticationClassReferences
-AllowedClientTypesSpecifies allowed client types.
-AlwaysRequireAuthenticationIndicates to always require authentication.
-AutoUpdateEnabledIndicates whether changes to the federation metadata by the *MetadataURL* parameter apply automatically to the configuration of the trust relationship.
-ClaimAcceptedSpecifies an array of claims that this relying party accepts.
-ClaimsProviderNameSpecifies an array of claims provider names.
-DelegationAuthorizationRulesSpecifies the delegation authorization rules for issuing claims to this relying party.
-DelegationAuthorizationRulesFileSpecifies a file that contains the delegation authorization rules for issuing claims to this relying party.
-EnabledIndicates whether the relying party trust is enabled.
-EnableJWTIndicates whether the JSON Web Token (JWT) format should be used to issue a token on a WS-Federation request.
-EncryptClaimsIndicates whether the claims that are sent to the relying party are encrypted.
-EncryptedNameIdRequiredIndicates whether the relying party requires that the NameID claim be encrypted.
-EncryptionCertificateSpecifies the certificate to be used for encrypting claims that are issued to this relying party.
-EncryptionCertificateRevocationCheckSpecifies the type of validation that should occur for the encryption certificate it is used for encrypting claims to the relying party.
-IdentifierSpecifies the unique identifiers for this relying party trust.
-ImpersonationAuthorizationRulesSpecifies the impersonation authorization rules for issuing claims to this relying party.
-ImpersonationAuthorizationRulesFileSpecifies the file that contains the impersonation authorization rules for issuing claims to this relying party.
-IssuanceAuthorizationRulesSpecifies the issuance authorization rules for issuing claims to this relying party.
-IssuanceAuthorizationRulesFileSpecifies the file that contains the issuance authorization rules for issuing claims to this relying party.
-IssuanceTransformRulesSpecifies the issuance transform rules for issuing claims to this relying party.
-IssuanceTransformRulesFileSpecifies the file that contains the issuance transform rules for issuing claims to this relying party.
-IssueOAuthRefreshTokensToSpecifies the refresh token issuance device types.
-MetadataFileSpecifies a file path, such as c:\metadata.xml, that contains the federation metadata for this relying party trust.
-MetadataUrlSpecifies a URL at which the federation metadata for this relying party trust is available.
-MonitoringEnabledIndicates whether periodic monitoring of this relying party federation metadata is enabled.
-NameSpecifies the friendly name of this relying party trust.
-NotBeforeSkewSpecifies the skew, as in integer, for the time stamp that marks the beginning of the validity period.
-NotesSpecifies notes for this relying party trust.
-PassThruReturns an object representing the item with which you are working.
-ProtocolProfileSpecifies which protocol profiles the relying party supports.
-RefreshTokenProtectionEnabledIndicates that refresh token protection is enabled.
-RequestMFAFromClaimsProvidersIndicates whether to use the request MFA from claims providers option.
-RequestSigningCertificateSpecifies an array of certificates to be used to verify the signature on a request from the relying party.
-SamlEndpointSpecifies an array of Security Assertion Markup Language (SAML) protocol endpoints for this relying party.
-SamlResponseSignatureSpecifies the response signature or signatures that the relying party expects.
-SignatureAlgorithmSpecifies the signature algorithm that the relying party uses for signing and verification.
-SignedSamlRequestsRequiredIndicates whether the Federation Service requires signed SAML protocol requests from the relying party.
-SigningCertificateRevocationCheckSpecifies the type of certificate validation that occur when signatures on requests from the relying party are verified.
-TokenLifetimeSpecifies the duration, in minutes, for which the claims that are issued to the relying party are valid.
-WSFedEndpointSpecifies the WS-Federation Passive URL for this relying party.
-Confirm, -cfPrompts you for confirmation before running the cmdlet.
-WhatIf, -wiShows what would happen if the cmdlet runs.