編集

次の方法で共有

Set-AdfsWebApplicationProxyRelyingPartyTrust

Module:
ADFS Module

Modifies properties of the relying party trust object for the Web Application Proxy.

Syntax

Default (Default) 

Set-AdfsWebApplicationProxyRelyingPartyTrust
    [-AlwaysRequireAuthentication <Boolean>]
    [-Identifier <String[]>]
    [-AccessControlPolicyName <String>]
    [-AccessControlPolicyParameters <Object>]
    [-IssuanceAuthorizationRules <String>]
    [-IssuanceAuthorizationRulesFile <String>]
    [-IssuanceTransformRules <String>]
    [-IssuanceTransformRulesFile <String>]
    [-AdditionalAuthenticationRules <String>]
    [-AdditionalAuthenticationRulesFile <String>]
    [-Name <String>]
    [-NotBeforeSkew <Int32>]
    [-Notes <String>]
    [-PassThru]
    [-TokenLifetime <Int32>]
    [-WhatIf]
    [-Confirm]
    [<CommonParameters>]

Description

The Set-AdfsWebApplicationProxyRelyingPartyTrust cmdlet modifies properties of the relying party trust object for Web Application Proxy. You can modify authentication and authorization policies that control all external access through the proxy.

Examples

Example 1: Specify authorization rules by using a file

PS C:\> Set-AdfsWebApplicationProxyRelyingPartyTrust -IssuanceAuthorizationRulesFile "C:\Rules\RulesFile07"

This command specifies authorization rules for the Web Application Proxy relying party trust, based on a file that contains the rules.

Parameters

-AccessControlPolicyName

The Set-AdfsWebApplicationProxyRelyingPartyTrust cmdlet modifies properties of the relying party trust object for Web Application Proxy. You can modify authentication and authorization policies that control all external access through the proxy.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:True
Value from remaining arguments:False

-AccessControlPolicyParameters

Specifies access control policy parameters.

Parameter properties

Type:Object
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:True
Value from remaining arguments:False

-AdditionalAuthenticationRules

Specifies rules for additional authentication on the proxy. For more information about the claim language for rules, see Understanding Claim Rule Language in AD FS 2.0 & Higher on TechNet.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-AdditionalAuthenticationRulesFile

Specifies a file that contains rules for additional authentication for this relying party.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-AlwaysRequireAuthentication

Indicates whether access requires authentication, even if this relying party has previously authenticated credentials for access. Specify a value of $True to require users to always supply credentials to access sensitive resources.

Parameter properties

Type:Boolean
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-Confirm

Prompts you for confirmation before running the cmdlet.

Parameter properties

Type:SwitchParameter
Default value:False
Supports wildcards:False
DontShow:False
Aliases:cf

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-Identifier

Specifies an array of unique identifiers. The proxy uses the identifiers that you specify to specify its corresponding relying party trust when it initiates sign-in requests to obtain tokens for itself. No other trust can use an identifier from this list. As common practice, you can use Uniform Resource Identifiers (URIs) as unique identifiers for a relying party trust, or you can use any string.

Parameter properties

Type:

String[]

Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-IssuanceAuthorizationRules

Specifies the issuance authorization rules for issuing claims to this relying party. Issuance authorization rules control access to applications that are enabled for pre-authentication through Active Directory Federation Services (AD FS), and then accessed through the proxy. By default, all authenticated users can access applications.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:True
Value from remaining arguments:False

-IssuanceAuthorizationRulesFile

Specifies a file that contains the issuance authorization rules for issuing claims to this relying party.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-IssuanceTransformRules

Specifies the issuance transform rules for issuing claims to this relying party. You should not, typically, modify the value of this setting.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:True
Value from remaining arguments:False

-IssuanceTransformRulesFile

Specifies a file that contains the issuance transform rules for issuing claims to this relying party.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-Name

Specifies a name. The cmdlet modifies the Web Application Proxy relying party trust that has the friendly name that you specify.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-NotBeforeSkew

Specifies the skew, as an integer, for the time stamp that marks the beginning of the validity period. The higher this number is, the farther back in time the validity period begins with respect to the time that the claims are issued for the relying party. By default, this value is 0. Specify a positive value if validation fails on the Web Application Proxy relying party because the validity period has not yet begun.

Parameter properties

Type:Int32
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-Notes

Specifies notes. The cmdlet stores the notes that you specify for the Web Application Proxy relying party trust.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-PassThru

Returns an object representing the item with which you are working. By default, this cmdlet does not generate any output.

Parameter properties

Type:SwitchParameter
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-TokenLifetime

Specifies the duration, in minutes, for which the claims that are issued to the relying party are valid.

Parameter properties

Type:Int32
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Parameter properties

Type:SwitchParameter
Default value:False
Supports wildcards:False
DontShow:False
Aliases:wi

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.