CmdID

CmdID / PowerShell / Cmdlets / Set

Set-AdfsProperties

Sets the properties that control global behaviors in AD FS. Windows Server PowerShell reference

From the Windows Server PowerShell reference 70 parameters Its page in the reference

Opens CmdID with your command, read as PowerShell. It is read in your browser and sent nowhere.

Parameters

70 in the Windows Server PowerShell reference
Show its 70 parameters
-AcceptableIdentifiersSpecifies an array of identifiers that are acceptable names for the Federation Service when it checks the audience for claims that it receives from another claims provider.
-AddProxyAuthorizationRulesThis parameter is deprecated.
-AllowLocalAdminsServiceAdministrationIndicates that local administrator service administration is allowed.
-AllowSystemServiceAdministrationIndicates that system service administration is allowed.
-ArtifactDbConnectionSpecifies the connection string to use for the database that maintains the artifacts that the artifact resolution service uses.
-AuditLevelSpecifies an array of audit levels.
-AuthenticationContextOrderSpecifies an array of authentication contexts, in order of relative strength.
-AutoCertificateRolloverIndicates whether the system manages certificates for the administrator and generates new certificates before the expiration date of current certificates.
-BrowserSsoEnabledIndicates that browser single sign-on (SSO) is enabled.
-BrowserSsoSupportedUserAgentsSpecifies an array of user agents that are supported for browser SSO.
-CertificateCriticalThresholdSpecifies the period of time, in days, prior to the expiration of a current primary signing or decryption certificate.
-CertificateDurationSpecifies the period of time, in days, that any certificates that the Federation Service generates remain valid.
-CertificateGenerationThresholdSpecifies the period of time, in days, before the Federation Service generates a new primary certificate to replace the current primary certificate.
-CertificatePromotionThresholdSpecifies the period of time, in days, during which a newly generated certificate remains a secondary certificate before being promoted as the primary certificate.
-CertificateRolloverIntervalSpecifies the certificate rollover interval, in minutes.
-CertificateThresholdMultiplierSpecifies the certificate threshold multiplier.
-ClientCertRevocationCheckDo not use this parameter.
-ContactPersonSpecifies the contact information for support issues.
-DelegateServiceAdministrationSpecifies the delegate service administration.
-DeviceUsageWindowInDaysSpecifies the length of the device usage window in days.
-DisplayNameSpecifies a friendly name for the Federation Service.
-EnableExtranetLockoutIndicates whether to enable the lockout algorithm for extranet.
-EnableIdPInitiatedSignonPageSpecifies whether to enable the EnableIdPInitiatedSignonPage property.
-EnableKmsiIndicates whether to enable the Keep Me Signed In (KMSI) option for form-based authentication.
-EnableLocalAuthenticationTypesIndicates that local authentication types are enabled.
-EnableLoopDetectionIndicates whether to enable loop detection.
-EnableOAuthDeviceFlowEnables the OAuth Device Flow.
-EnableOAuthLogoutEnables the OAuth logout endpoint publishing in the OAuth discovery document.
-EnablePersistentSsoIndicates whether to store the SSO token in persistent cookies for devices joined to a workplace.
-EnableRelayStateForIdpInitiatedSignOnIndicates that relay state for issuing distribution point (IDP) initiated sign-on is enabled.
-ExtendedProtectionTokenCheckSpecifies the level of extended protection for authentication supported by the federation server.
-ExtranetLockoutRequirePDCSpecifies whether extranet lockout requires a primary domain controller (PDC).
-ExtranetLockoutThresholdSpecifies the maximum number of bad password attempts permitted against the directory before the account is throttled when accessing applications from the extranet.
-ExtranetObservationWindowSpecifies the timespan of the lockout observation window.
-FederationPassiveAddressDo not use this parameter.
-ForceForces the command to run without asking for user confirmation.
-GlobalRelyingPartyClaimsIssuancePolicySpecifies a global relying party claims issuance policy.
-HostNameSpecifies the network addressable host name of the Federation Service.
-HttpPortSpecifies the HTTP port for the server.
-HttpsPortSpecifies the HTTPS port for the server.
-IdentifierSpecifies the URI that uniquely identifies the Federation Service.
-IdTokenIssuerSpecifies the URI of the token issuer.
-IgnoreTokenBindingSpecifies whether to ignore token binding.
-IntranetUseLocalClaimsProviderIndicates whether all web based requests from the intranet default to the default Active Directory claims provider.
-KmsiLifetimeMinsSpecifies the lifetime of the sign on status for KMSI.
-LogLevelSpecifies an array of log detail.
-LoopDetectionMaximumTokensIssuedInIntervalSpecifies the maximum number of tokens that can be issued within the time period specified by the LoopDetectionTimeIntervalInSeconds parameter before AD FS will reject the request and present an erro…
-LoopDetectionTimeIntervalInSecondsSpecifies the time interval in seconds for AD FS to track multiple token requests that are occurring and being rejected by the relying party causing a redirect back to AD FS for a new token request.
-MonitoringIntervalSpecifies the frequency, in minutes, with which the Federation Service monitors the federation metadata of relying parties and claims providers that are enabled for federation metadata monitoring.
-NetTcpPortSpecifies the TCP port number for the server.
-NtlmOnlySupportedClientAtProxyIndicates whether to enable support for NTLM-based authentication in situations where the active federation server proxy does not support Negotiate method of authentication.
-OrganizationInfoSpecifies information about the organization as published in the federation metadata for the Federation Service.
-PassThruReturns an object representing the item with which you are working.
-PersistentSsoCutoffTimeSpecifies the earliest issue time of accepted persistent single sign-on (SSO) tokens and OAuth refresh tokens.
-PersistentSsoLifetimeMinsSpecifies the duration, in minutes, of the persistent SSO experience.
-PreventTokenReplaysIndicates whether the Federation Service prevents the replay of security tokens.
-PromptLoginFallbackAuthenticationTypeThis parameter is obsolete.
-PromptLoginFederationThis parameter is obsolete.
-ProxyTrustTokenLifetimeSpecifies the valid token lifetime, in minutes, for proxy trust tokens.
-ReplayCacheExpirationIntervalSpecifies the cache duration, in minutes, for token replay detection.
-SamlMessageDeliveryWindowSpecifies the duration, in minutes, for which the Security Assertion Markup Language (SAML) messages sent by the Federation Service are considered valid.
-SendClientRequestIdAsQueryStringParameterIndicates whether the client request id, or activity id, is sent as a query string on any redirect from AD FS that is sent to itself.
-SignedSamlRequestsRequiredIndicates whether the Federation Service requires signed SAML protocol requests from the relying party.
-SignSamlAuthnRequestsIndicates whether the Federation Service signs SAML protocol authentication requests to claims providers.
-SsoEnabledThis parameter is deprecated.
-SsoLifetimeSpecifies the duration, in minutes, of the single sign-on (SSO) experience for Web browser clients.
-TlsClientPortSpecifies the port number where AD FS listens for user certificate authentication requests.
-WIASupportedUserAgentsSpecifies an array of acceptable user agents that support seamless sign-in with Windows Integrated Authentication.
-Confirm, -cfPrompts you for confirmation before running the cmdlet.
-WhatIf, -wiShows what would happen if the cmdlet runs.