Managing Trust Policy on Federation Servers

Applies To: Windows Server 2003 R2

The Active Directory Federation Services (ADFS) trust policy file defines the set of parameters that a Federation Service requires to identify partners, certificates, account stores, claims, and various properties of these entities that are associated with the Federation Service.

Task requirements

You need the following to perform the procedures for this task:

• Active Directory Federation Services MMC snap-in

• TrustPolicy.xml file located in %systemdrive%\ADFS

The following procedures for managing trust policy on federation servers are described in this task. Use these procedures on an as-needed basis.

• Change the Federation Service trust policy location

• Change the Federation Service URI

• Change the Federation Service endpoint URL

• Configure the Federation Service default Web pages

• Change the primary display name for a trust policy

• Change a claims transform module

• Change the token lifetime for a Federation Service

• Change the trust policy refresh period

• Change the Windows domain trust cache refresh period

See Also

Concepts

Managing ADFS Partnerships
Managing Accounts and Account Stores
Managing Claims and Claim Mapping
Managing Certificates Used by Federation Servers