編集

次の方法で共有


Add-AdfsWebApiApplication

Adds a Web API application role to an application in AD FS.

Syntax

ApplicationGroupIdentifier (Default)

Add-AdfsWebApiApplication
    [-ApplicationGroupIdentifier] <String>
    -Name <String>
    -Identifier <String[]>
    [-AllowedAuthenticationClassReferences <String[]>]
    [-ClaimsProviderName <String[]>]
    [-IssuanceAuthorizationRules <String>]
    [-IssuanceAuthorizationRulesFile <String>]
    [-DelegationAuthorizationRules <String>]
    [-DelegationAuthorizationRulesFile <String>]
    [-ImpersonationAuthorizationRules <String>]
    [-ImpersonationAuthorizationRulesFile <String>]
    [-IssuanceTransformRules <String>]
    [-IssuanceTransformRulesFile <String>]
    [-AdditionalAuthenticationRules <String>]
    [-AdditionalAuthenticationRulesFile <String>]
    [-AccessControlPolicyName <String>]
    [-AccessControlPolicyParameters <Object>]
    [-NotBeforeSkew <Int32>]
    [-Description <String>]
    [-TokenLifetime <Int32>]
    [-AlwaysRequireAuthentication]
    [-AllowedClientTypes <AllowedClientTypes>]
    [-IssueOAuthRefreshTokensTo <RefreshTokenIssuanceDeviceTypes>]
    [-RefreshTokenProtectionEnabled <Boolean>]
    [-RequestMFAFromClaimsProviders]
    [-PassThru]
    [-WhatIf]
    [-Confirm]
    [<CommonParameters>]

ApplicationGroupObject

Add-AdfsWebApiApplication
    [-ApplicationGroup] <ApplicationGroup>
    -Name <String>
    -Identifier <String[]>
    [-AllowedAuthenticationClassReferences <String[]>]
    [-ClaimsProviderName <String[]>]
    [-IssuanceAuthorizationRules <String>]
    [-IssuanceAuthorizationRulesFile <String>]
    [-DelegationAuthorizationRules <String>]
    [-DelegationAuthorizationRulesFile <String>]
    [-ImpersonationAuthorizationRules <String>]
    [-ImpersonationAuthorizationRulesFile <String>]
    [-IssuanceTransformRules <String>]
    [-IssuanceTransformRulesFile <String>]
    [-AdditionalAuthenticationRules <String>]
    [-AdditionalAuthenticationRulesFile <String>]
    [-AccessControlPolicyName <String>]
    [-AccessControlPolicyParameters <Object>]
    [-NotBeforeSkew <Int32>]
    [-Description <String>]
    [-TokenLifetime <Int32>]
    [-AlwaysRequireAuthentication]
    [-AllowedClientTypes <AllowedClientTypes>]
    [-IssueOAuthRefreshTokensTo <RefreshTokenIssuanceDeviceTypes>]
    [-RefreshTokenProtectionEnabled <Boolean>]
    [-RequestMFAFromClaimsProviders]
    [-PassThru]
    [-WhatIf]
    [-Confirm]
    [<CommonParameters>]

Description

The Add-AdfsWebApiApplication cmdlet adds a Web API application role to an application in Active Directory Federation Services (AD FS).

Parameters

-AccessControlPolicyName

Specifies the name of an access control policy.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:True
Value from remaining arguments:False

-AccessControlPolicyParameters

Specifies the parameters of an access control policy.

Parameter properties

Type:Object
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:True
Value from remaining arguments:False

-AdditionalAuthenticationRules

Specifies additional authentication rules.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:True
Value from remaining arguments:False

-AdditionalAuthenticationRulesFile

Specifies a file that contains all the rules for additional authentication for this relying party.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-AllowedAuthenticationClassReferences

Specifies an array of allow authentication class references.

Parameter properties

Type:

String[]

Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-AllowedClientTypes

Specifies allowed client types. The acceptable values for this parameter are:

  • None
  • Public
  • Confidential

Parameter properties

Type:AllowedClientTypes
Default value:None
Accepted values:None, Public, Confidential
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-AlwaysRequireAuthentication

Indicates that this Web API application role always requires authentication, even if it previously authenticated credentials for access. Specify this parameter to require users to always supply credentials to access sensitive resources.

Parameter properties

Type:SwitchParameter
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:True
Value from remaining arguments:False

-ApplicationGroup

Specifies an application group.

Parameter properties

Type:ApplicationGroup
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

ApplicationGroupObject
Position:0
Mandatory:True
Value from pipeline:True
Value from pipeline by property name:False
Value from remaining arguments:False

-ApplicationGroupIdentifier

Specifies the ID of an application group.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

ApplicationGroupIdentifier
Position:0
Mandatory:True
Value from pipeline:True
Value from pipeline by property name:True
Value from remaining arguments:False

-ClaimsProviderName

Specifies an array of claims provider names that you can configure for a relying party trust for Home Realm Discovery (HRD) scenario.

If claims provider names are specified for a relying party, the home realm discovery page shows only those claims providers for this relying party. If only one claims provider name is specified, home realm discovery page is not shown. The user is redirected to this claims provider for authentication.

Parameter properties

Type:

String[]

Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-Confirm

Prompts you for confirmation before running the cmdlet.

Parameter properties

Type:SwitchParameter
Default value:False
Supports wildcards:False
DontShow:False
Aliases:cf

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-DelegationAuthorizationRules

Specifies delegation authorization rules.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:True
Value from remaining arguments:False

-DelegationAuthorizationRulesFile

Specifies a file that contains all the rules for delegation authentication for this relying party.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-Description

Specifies a description.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-Identifier

Specifies an array of identifiers.

Parameter properties

Type:

String[]

Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-ImpersonationAuthorizationRules

Specifies the impersonation authorization rules.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:True
Value from remaining arguments:False

-ImpersonationAuthorizationRulesFile

Specifies a file that contains all the rules for impersonation authentication for this relying party.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-IssuanceAuthorizationRules

Specifies the issuance authorization rules.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:True
Value from remaining arguments:False

-IssuanceAuthorizationRulesFile

Specifies a file that contains all the rules for issuance authentication for this relying party.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-IssuanceTransformRules

Specifies the issuance transform rules.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:True
Value from remaining arguments:False

-IssuanceTransformRulesFile

Specifies a file that contains all the rules for issuance transform for this relying party.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-IssueOAuthRefreshTokensTo

Specifies the refresh token issuance device types. The acceptable values for this parameter are:

  • NoDevice
  • WorkplaceJoinedDevices
  • AllDevices

Parameter properties

Type:RefreshTokenIssuanceDeviceTypes
Default value:None
Accepted values:NoDevice, WorkplaceJoinedDevices, AllDevices
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-Name

Specifies a name.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-NotBeforeSkew

Specifies the not before skew value.

Parameter properties

Type:Int32
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-PassThru

Returns an object representing the item with which you are working. By default, this cmdlet does not generate any output.

Parameter properties

Type:SwitchParameter
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-RefreshTokenProtectionEnabled

Indicates whether refresh token protection is enabled.

Parameter properties

Type:Boolean
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-RequestMFAFromClaimsProviders

Indicates that the request MFA from claims providers option is used.

Parameter properties

Type:SwitchParameter
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:True
Value from remaining arguments:False

-TokenLifetime

Specifies the token lifetime.

Parameter properties

Type:Int32
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Parameter properties

Type:SwitchParameter
Default value:False
Supports wildcards:False
DontShow:False
Aliases:wi

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

Inputs

String

String objects are received by the AccessControlPolicyName, AdditionalAuthenticationRules, ApplicationGroupIdentifier, DelegationAuthorizationRules, ImpersonationAuthorizationRules, IssuanceAuthorizationRules, and IssuanceTransformRules parameters.

Object

Objects are received by the AccessControlPolicyParameters parameter.

SwitchParameter

SwitchParameter objects are received by the AlwaysRequireAuthentication and RequestMFAFromClaimsProviders parameters.

ApplicationGroup

ApplicationGroup objects are received by the ApplicationGroup parameter.

Outputs

WebApiApplication

Returns the new WebApiApplication object when the PassThru parameter is specified. By default, this cmdlet does not generate any output.