New-AdfsClaimRuleSet

New-AdfsClaimRuleSet

Creates a set of claim rules.

Syntaxe

Parameter Set: FromFile
New-AdfsClaimRuleSet -ClaimRuleFile <String> [ <CommonParameters>]

Parameter Set: FromParams
New-AdfsClaimRuleSet -ClaimRule <String[]> [ <CommonParameters>]

Description détaillée

The New-AdfsClaimRuleSet cmdlet creates a set of claim rules in services de fédération Active Directory (AD FS) 2.0.

Paramètres

-ClaimRule<String[]>

Specifies an array of individual rules in this rule set.

Alias

none

Obligatoire ?

true

Position ?

named

Valeur par défaut

none

Accepter l’entrée de pipeline ?

false

Accepter les caractères génériques ?

false

-ClaimRuleFile<String>

Specifies the serialized policy text that is created by the collection of rules in the rule set.

Alias

none

Obligatoire ?

true

Position ?

named

Valeur par défaut

none

Accepter l’entrée de pipeline ?

false

Accepter les caractères génériques ?

false

<CommonParameters>

Cette applet de commande prend en charge les paramètres courants : -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer et -OutVariable. Pour plus d’informations, consultez about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216).

Entrées

Le type d’entrée correspond au type des objets que vous pouvez transmettre à l’applet de commande.

  • None

Sorties

Le type de sortie est le type des objets émis par l’applet de commande.

  • Microsoft.IdentityServer.PowerShell.Resources.ClaimRuleSet

    This cmdlet generates a class structure that represents a set of AD FS 2.0 claim rules.

Remarques

  • You can assign these claim rules to a claims provider trust or relying party trust by using the corresponding cmdlets.

Exemples

Example 1: Create a claim rule set by using a text file

The first command creates a claim rule set by using a text file, and then stores it in the $RuleSet variable.

The second command uses the Set-AdfsRelyingPartyTrust cmdlet to assign the rule set stored in $RuleSet to a relying party trust. The command refers to the ClaimsRuleString property of the object stored in $RuleSet.

PS C:\> $RuleSet = New-AdfsClaimRuleSet -ClaimRuleFile 'C:\ruleset.txt'
PS C:\> Set-AdfsRelyingPartyTrust -TargetName "Fabrikam" -IssuanceTransformRules $RuleSet.ClaimRulesString

Example 2: Create a claim rule set by using an inline rule

The first command creates a claim rule set by using an inline AD FS 2.0 claims language rule, and then stores it in the $RuleSet variable.

The second command uses Set-AdfsRelyingPartyTrust to assign the rule set stored in $RuleSet to a relying party trust. The command refers to the ClaimsRuleString property of the object stored in $RuleSet.

PS C:\> $RuleSet = New-AdfsClaimRuleSet -ClaimRule 'c:[] => issue(claim = c);'
PS C:\> Set-AdfsRelyingPartyTrust -TargetName "Fabrikam" -IssuanceTransformRules $RuleSet.ClaimRulesString

Rubriques connexes

Get-AdfsClaimsProviderTrust

Set-AdfsClaimsProviderTrust

Update-AdfsClaimsProviderTrust

Set-AdfsRelyingPartyTrust