Manually updating a claims provider

  • Article

By default, AD FS 2.0 updates a relying party trust from federation metadata every 24 hours. You should manually update the relying party trust metadata if you make any of the following changes:

  • You change the encryption certificate used for claims-based authentication.

  • You change the root domain web addresses. To view these settings:

    1. Start the Deployment Manager.

    2. In the Actions pane, click Properties.

    3. Click the Web Address tab.

  • You create a new organization.

  • You change the domains for the server roles for Microsoft Dynamics CRM Server 2011 entered in the IFD Configuration Wizard. To view these settings:

    1. Start the Deployment Manager.

    2. In the Deployment Managerconsole tree, right-click Microsoft Dynamics CRM, and then click Configure Internet-Facing Deployment.

    3. Click Next.

  • You change the external domain.

  • You change the certificate common name. To view these settings:

    1. Start the Deployment Manager.

    2. In the Deployment Manager console tree, right-click Microsoft Dynamics CRM, and then click Configure Claims-based authentication.

    3. Click Next twice.

To manually update a relying party trust from federation metadata

  1. Click Start, point to Administrative Tools, and then click AD FS 2.0.

  2. Click the AD FS 2.0\Trust Relationships folder, and then click either Claims Provider Trusts or Relying Party Trusts, depending on which trust you want to update.

  3. In the details pane, right-click the claims provider trust or relying party trust that you want to update from federation metadata.

  4. Click Update from Federation Metadata, and then click Update.

You can specify how often the Federation Service will monitor the federation metadata of relying parties and claims providers that are enabled for federation metadata monitoring.

To set the interval for monitoring metadata for trust partners using Windows PowerShell

  1. Open a Windows PowerShell prompt.

  2. Set the monitoring interval:

    PS > Set-ADFSProperties -MonitoringInterval <int>

    where:

    • <int> is the interval in minutes

Send comments about this article to Microsoft.

© 2012 Microsoft Corporation. All rights reserved.