Set-AdfsWebApplicationProxyRelyingPartyTrust

Set-AdfsWebApplicationProxyRelyingPartyTrust

Modifies properties of the relying party trust object for the Web アプリケーション プロキシ.

構文

Parameter Set: Default
Set-AdfsWebApplicationProxyRelyingPartyTrust [-AdditionalAuthenticationRules <String> ] [-AdditionalAuthenticationRulesFile <String> ] [-AlwaysRequireAuthentication <Boolean> ] [-Identifier <String[]> ] [-IssuanceAuthorizationRules <String> ] [-IssuanceAuthorizationRulesFile <String> ] [-IssuanceTransformRules <String> ] [-IssuanceTransformRulesFile <String> ] [-Name <String> ] [-NotBeforeSkew <Int32> ] [-Notes <String> ] [-PassThru] [-TokenLifetime <Int32> ] [-Confirm] [-WhatIf] [ <CommonParameters>]

詳細説明

The Set-AdfsWebApplicationProxyRelyingPartyTrust cmdlet modifies properties of the relying party trust object for Web アプリケーション プロキシ. You can modify authentication and authorization policies that control all external access through the proxy.

パラメーター

-AdditionalAuthenticationRules<String>

Specifies rules for additional authentication on the proxy. For more information about the claim language for rules, see Understanding Claim Rule Language in AD FS 2.0 & Higher (https://social.technet.microsoft.com/wiki/contents/articles/4792.understanding-claim-rule-language-in-ad-fs-2-0-higher.aspx) on TechNet.

-AdditionalAuthenticationRulesFile<String>

Specifies a file that contains rules for additional authentication for this relying party.

-AlwaysRequireAuthentication<Boolean>

Indicates whether access requires authentication, even if this relying party has previously authenticated credentials for access. Specify a value of $True to require users to always supply credentials to access sensitive resources.

-Identifier<String[]>

Specifies an array of unique identifiers. The proxy uses the identifiers that you specify to specify its corresponding relying party trust when it initiates sign-in requests to obtain tokens for itself. No other trust can use an identifier from this list. As common practice, you can use Uniform Resource Identifiers (URIs) as unique identifiers for a relying party trust, or you can use any string.

-IssuanceAuthorizationRules<String>

Specifies the issuance authorization rules for issuing claims to this relying party. Issuance authorization rules control access to applications that are enabled for pre-authentication through Active Directory フェデレーション サービス (AD FS), and then accessed through the proxy. By default, all authenticated users can access applications.

-IssuanceAuthorizationRulesFile<String>

Specifies a file that contains the issuance authorization rules for issuing claims to this relying party.

-IssuanceTransformRules<String>

Specifies the issuance transform rules for issuing claims to this relying party. You should not, typically, modify the value of this setting.

-IssuanceTransformRulesFile<String>

Specifies a file that contains the issuance transform rules for issuing claims to this relying party.

-Name<String>

Specifies a name. The cmdlet modifies the Web アプリケーション プロキシ relying party trust that has the friendly name that you specify.

-NotBeforeSkew<Int32>

Specifies the skew, as an integer, for the time stamp that marks the beginning of the validity period. The higher this number is, the farther back in time the validity period begins with respect to the time that the claims are issued for the relying party. By default, this value is 0. Specify a positive value if validation fails on the Web アプリケーション プロキシ relying party because the validity period has not yet begun.

-Notes<String>

Specifies notes. The cmdlet stores the notes that you specify for the Web アプリケーション プロキシ relying party trust.

-PassThru

作業中の項目を表すオブジェクトを返します。既定では、このコマンドレットによる出力はありません。

-TokenLifetime<Int32>

Specifies the duration, in minutes, for which the claims that are issued to the relying party are valid.

-Confirm

コマンドレットを実行する前に、ユーザーに確認を求めます。

-WhatIf

コマンドレットを実行するとどのような結果になるかを表示します。コマンドレットは実行されません。

<CommonParameters>

このコマンドレットは次の共通パラメーターをサポートします。-Verbose、-Debug、-ErrorAction、-ErrorVariable、-OutBuffer、-OutVariable.詳細については、以下を参照してください。 about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216)。

入力

入力型は、コマンドレットにパイプできるオブジェクトの型です。

出力

出力型は、コマンドレットによって生成されるオブジェクトの型です。

例

Example 1: Specify authorization rules by using a file

This command specifies authorization rules for the Web アプリケーション プロキシ relying party trust, based on a file that contains the rules.

PS C:\> Set-AdfsWebApplicationProxyRelyingPartyTrust -IssuanceAuthorizationRulesFile "C:\Rules\RulesFile07"

関連トピック

Add-AdfsWebApplicationProxyRelyingPartyTrust

Disable-AdfsWebApplicationProxyRelyingPartyTrust

Enable-AdfsWebApplicationProxyRelyingPartyTrust

Get-AdfsWebApplicationProxyRelyingPartyTrust

Remove-AdfsWebApplicationProxyRelyingPartyTrust