Add-AdfsNonClaimsAwareRelyingPartyTrust

Add-AdfsNonClaimsAwareRelyingPartyTrust

Adds a relying party trust that represents a non-claims-aware web application or service to the Federation Service.

구문

Parameter Set: Default
Add-AdfsNonClaimsAwareRelyingPartyTrust [-Name] <String> [-Identifier] <String[]> [-AdditionalAuthenticationRules <String> ] [-AdditionalAuthenticationRulesFile <String> ] [-AlwaysRequireAuthentication] [-Enabled <Boolean> ] [-IssuanceAuthorizationRules <String> ] [-IssuanceAuthorizationRulesFile <String> ] [-Notes <String> ] [-PassThru] [-Confirm] [-WhatIf] [ <CommonParameters>]

자세한 설명

The Add-AdfsNonClaimsAwareRelyingPartyTrust cmdlet creates a relying party trust for web applications or services that do not rely directly on AD FS(Active Directory Federation Services) to issue tokens, but instead rely on a third party that accesses such tokens and transforms them into what applications understand. A non-claims-aware relying party trust is useful for defining authentication and authorization policies for web applications and services that do not rely on AD FS tokens. The 웹 응용 프로그램 프록시 requests such tokens for preauthentication to web applications or services that have corresponding non-claims-aware relying party trusts for requests that come from outside the network through the proxy.

매개 변수

-AdditionalAuthenticationRules<String>

Specifies rules for additional authentication on the relying party. For more information about the claims language for rules, see Understanding Claim Rule Language in AD FS 2.0 & Higher on TechNet.

-AdditionalAuthenticationRulesFile<String>

Specifies the file that contains all the rules for additional authentication for the relying party.

-AlwaysRequireAuthentication

Indicates that access requires authentication, even if this relying party has previously authenticated credentials for access. Specify this parameter to require users to always supply credentials to access sensitive resources.

-Enabled<Boolean>

Indicates whether to enable this relying party trust. Specify a value of $True for this parameter to allow authentication and authorization to the relying party.

-Identifier<String[]>

Specifies an array of unique identifiers for the non-claims-aware relying party trust. No other trust can use an identifier from this list. As common practice, you can use Uniform Resource Identifiers (URIs) as unique identifiers for a relying party trust, or you can use any string.

-IssuanceAuthorizationRules<String>

Specifies the authorization rules for issuing claims to the relying party.

-IssuanceAuthorizationRulesFile<String>

Specifies the file that contains the authorization rules for issuing claims to the relying party.

-Name<String>

Specifies a name. The cmdlet adds the 웹 응용 프로그램 프록시 relying party trust that has the display name that you specify.

-Notes<String>

Specifies notes for the relying party trust. Use this parameter to store information such as owners and contacts when you manage a large number of applications.

-PassThru

작업하고 있는 항목을 나타내는 개체를 반환합니다. 기본적으로 이 cmdlet은 출력을 생성하지 않습니다.

-Confirm

cmdlet을 실행하기 전에 확인 메시지가 표시됩니다.

-WhatIf

cmdlet이 실행될 경우 결과 동작을 표시합니다. cmdlet이 실행되지 않습니다.

<CommonParameters>

이 cmdlet은 일반 매개 변수 -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer 및 -OutVariable을 지원합니다. 자세한 내용은 다음을 참조하세요. about_CommonParameters(https://go.microsoft.com/fwlink/p/?LinkID=113216).

입력

입력 유형은 cmdlet에 파이프할 수 있는 개체의 유형입니다.

출력

출력 유형은 cmdlet이 내보내는 개체의 유형입니다.

예제

Example 1: Add a non-claims-aware relying party trust for an application

This command adds a non-claims-aware relying party trust for the application named ExpenseReport and allows all authenticated users to access this application through the Web Application Proxy.

PS C:\> Add-AdfsNonClaimsAwareRelyingPartyTrust -Name 'ExpenseReport' -Identifier 'http://contosoexpense/' -IssuanceAuthorizationRules '=>issue(Type = "https://schemas.microsoft.com/authorization/claims/permit", Value = "true");'

Example 2: Add a non-claims-aware relying party trust that restricts access to an application

This command adds a non-claims-aware relying party trust for the application named ExpenseReport and restricts access to this application, through the Web Application Proxy, to only users from their workplace-joined devices.

PS C:\> Add-AdfsNonClaimsAwareRelyingPartyTrust -Name 'ExpenseReport' -Identifier 'http://contosoexpense/' -IssuanceAuthorizationRules 'c:[type=="https://schemas.microsoft.com/2012/01/devicecontext/claims/isregistereduser"]=>issue(Type = "https://schemas.microsoft.com/authorization/claims/permit", Value = "true");'

관련 항목

Get-AdfsNonClaimsAwareRelyingPartyTrust

Set-AdfsNonClaimsAwareRelyingPartyTrust

Enable-AdfsNonClaimsAwareRelyingPartyTrust

Disable-AdfsNonClaimsAwareRelyingPartyTrust

Remove-AdfsNonClaimsAwareRelyingPartyTrust