Revoke-ADFSProxyTrust
Revoke-ADFSProxyTrust
Revokes trust for all federation server proxies configured for the Federation Service.
Syntax
Revoke-ADFSProxyTrust [-Confirm] [-WhatIf] [ <CommonParameters>]
Detailed Description
Revokes trust for all federation server proxies by resetting the trust ID for the Federation Service. This operation is provided for lockdown purposes in the event of an attack or confirmed possible threat to your deployment. Once performed, operation effectively revokes trust to all configured proxies immediately.
Parameters
-Confirm
Prompts you for confirmation before running the cmdlet.
Required? |
false |
Position? |
named |
Default Value |
false |
Accept Pipeline Input? |
false |
Accept Wildcard Characters? |
false |
-WhatIf
Shows what would happen if the cmdlet runs. The cmdlet is not run.
Required? |
false |
Position? |
named |
Default Value |
false |
Accept Pipeline Input? |
false |
Accept Wildcard Characters? |
false |
<CommonParameters>
This cmdlet supports the common parameters: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer, and -OutVariable. For more information, see about_CommonParameters.
Inputs
The input type is the type of the objects that you can pipe to the cmdlet.
- None
Outputs
The output type is the type of the objects that the cmdlet emits.
- None
Notes
- This cmdlet should only be used in the vent of a security breach in live deployment. If you wish to practice using this cmdlet, use of a test lab environment to rehearse or validate this lockdown operation is recommended.
Examples
-------------------------- EXAMPLE 1 --------------------------
Description
-----------
Revokes all trust between the current federation server and any of its configured federation server proxies.
C:\PS>Revoke-ADFSProxyTrust