2015年3月18日水曜日

[AD FS]Windows Server Technical Previewで追加された機能~PowerShell編

以前のポストで概要を簡単にチェックしたWindows Server Technical PreviewのActive Directory Federation Services(AD FS)ですが、今回はPowerShellのコマンドレットがどのように変わったのか?という点から確認してみます。

関連ポスト
 [AD FS] Windows Server Technical PreviewのAD FSを試す
 http://idmlab.eidentity.jp/2014/10/ad-fs-windows-server-technical.html


結論としては、大きくは以下の機能関連のコマンドレットが追加されています。
・ローカルクレームプロバイダ
・アプリケーション・パーミッション(Scope/Permission)
・ポリシーテンプレート
・その他
 Relying Party Web Theme
 AD FS farm behavior level

特にアプリケーション・パーミッション関係の拡張ではOpenID ConnectのサポートやOAuth Implicit Flowのサポートに関連する拡張なので、AD FS活用のシナリオも広がってくると思われます。
(別途OAuth2.0やOpenID Connectのサポート状況については検証結果をポストしたいと思います。Previewなので若干おかしなところはありますが、概ね動いています)

参考)Windows Server 2012R2とWindows Server Technical PreviewのAD FS関連コマンドレット一覧比較
Windows Server 2012R2Windows Server Technical Preview変更
Add-AdfsAttributeStoreAdd-AdfsAttributeStore
Add-AdfsCertificateAdd-AdfsCertificate
Add-AdfsClaimDescriptionAdd-AdfsClaimDescription
Add-AdfsClaimsProviderTrustAdd-AdfsClaimsProviderTrust
Add-AdfsClientAdd-AdfsClient
Add-AdfsDeviceRegistrationUpnSuffixAdd-AdfsDeviceRegistrationUpnSuffix
Add-AdfsFarmNodeAdd-AdfsFarmNode
-Add-AdfsLocalClaimsProviderTrust新規
Add-AdfsNonClaimsAwareRelyingPartyTrustAdd-AdfsNonClaimsAwareRelyingPartyTrust
Add-AdfsRelyingPartyTrustAdd-AdfsRelyingPartyTrust
-Add-AdfsScopeDescription新規
Add-AdfsWebApplicationProxyRelyingPartyTrustAdd-AdfsWebApplicationProxyRelyingPartyTrust
Disable-AdfsClaimsProviderTrustDisable-AdfsClaimsProviderTrust
Disable-AdfsClientDisable-AdfsClient
Disable-AdfsDeviceRegistrationDisable-AdfsDeviceRegistration
Disable-AdfsEndpointDisable-AdfsEndpoint
-Disable-AdfsLocalClaimsProviderTrust新規
Disable-AdfsNonClaimsAwareRelyingPartyTrustDisable-AdfsNonClaimsAwareRelyingPartyTrust
Disable-AdfsRelyingPartyTrustDisable-AdfsRelyingPartyTrust
Disable-AdfsWebApplicationProxyRelyingPartyTrustDisable-AdfsWebApplicationProxyRelyingPartyTrust
Enable-AdfsClaimsProviderTrustEnable-AdfsClaimsProviderTrust
Enable-AdfsClientEnable-AdfsClient
Enable-AdfsDeviceRegistrationEnable-AdfsDeviceRegistration
Enable-AdfsEndpointEnable-AdfsEndpoint
-Enable-AdfsLocalClaimsProviderTrust新規
Enable-AdfsNonClaimsAwareRelyingPartyTrustEnable-AdfsNonClaimsAwareRelyingPartyTrust
Enable-AdfsRelyingPartyTrustEnable-AdfsRelyingPartyTrust
Enable-AdfsWebApplicationProxyRelyingPartyTrustEnable-AdfsWebApplicationProxyRelyingPartyTrust
Export-AdfsAuthenticationProviderConfigurationDataExport-AdfsAuthenticationProviderConfigurationData
Export-AdfsDeploymentSQLScriptExport-AdfsDeploymentSQLScript
Export-AdfsWebContentExport-AdfsWebContent
Export-AdfsWebThemeExport-AdfsWebTheme
Get-AdfsAdditionalAuthenticationRuleGet-AdfsAdditionalAuthenticationRule
-Get-AdfsApplicationPermission新規
Get-AdfsAttributeStoreGet-AdfsAttributeStore
Get-AdfsAuthenticationProviderGet-AdfsAuthenticationProvider
Get-AdfsAuthenticationProviderWebContentGet-AdfsAuthenticationProviderWebContent
Get-AdfsCertificateGet-AdfsCertificate
Get-AdfsClaimDescriptionGet-AdfsClaimDescription
Get-AdfsClaimsProviderTrustGet-AdfsClaimsProviderTrust
Get-AdfsClientGet-AdfsClient
Get-AdfsDeviceRegistrationGet-AdfsDeviceRegistration
Get-AdfsDeviceRegistrationUpnSuffixGet-AdfsDeviceRegistrationUpnSuffix
Get-AdfsEndpointGet-AdfsEndpoint
Get-AdfsGlobalAuthenticationPolicyGet-AdfsGlobalAuthenticationPolicy
Get-AdfsGlobalWebContentGet-AdfsGlobalWebContent
-Get-AdfsLocalClaimsProviderTrust新規
Get-AdfsNonClaimsAwareRelyingPartyTrustGet-AdfsNonClaimsAwareRelyingPartyTrust
-Get-AdfsPolicyTemplate新規
Get-AdfsPropertiesGet-AdfsProperties
Get-AdfsRegistrationHostsGet-AdfsRegistrationHosts
Get-AdfsRelyingPartyTrustGet-AdfsRelyingPartyTrust
Get-AdfsRelyingPartyWebContentGet-AdfsRelyingPartyWebContent
-Get-AdfsRelyingPartyWebTheme新規
-Get-AdfsScopeDescription新規
Get-AdfsSslCertificateGet-AdfsSslCertificate
Get-AdfsSyncPropertiesGet-AdfsSyncProperties
Get-AdfsWebApplicationProxyRelyingPartyTrustGet-AdfsWebApplicationProxyRelyingPartyTrust
Get-AdfsWebConfigGet-AdfsWebConfig
Get-AdfsWebThemeGet-AdfsWebTheme
-Grant-AdfsApplicationPermission新規
Import-AdfsAuthenticationProviderConfigurationDataImport-AdfsAuthenticationProviderConfigurationData
Import-AdfsWebContentImport-AdfsWebContent
Initialize-ADDeviceRegistrationInitialize-ADDeviceRegistration
Install-AdfsFarmInstall-AdfsFarm
-Invoke-AdfsFarmBehaviorLevelRaise新規
New-AdfsClaimRuleSetNew-AdfsClaimRuleSet
New-AdfsContactPersonNew-AdfsContactPerson
-New-AdfsLdapAttributeToClaimMapping新規
-New-AdfsLdapServerConnection新規
New-AdfsOrganizationNew-AdfsOrganization
-New-AdfsPolicyTemplate新規
New-AdfsSamlEndpointNew-AdfsSamlEndpoint
New-AdfsWebThemeNew-AdfsWebTheme
Publish-SslCertificatePublish-SslCertificate
Register-AdfsAuthenticationProviderRegister-AdfsAuthenticationProvider
Remove-AdfsAttributeStoreRemove-AdfsAttributeStore
Remove-AdfsAuthenticationProviderWebContentRemove-AdfsAuthenticationProviderWebContent
Remove-AdfsCertificateRemove-AdfsCertificate
Remove-AdfsClaimDescriptionRemove-AdfsClaimDescription
Remove-AdfsClaimsProviderTrustRemove-AdfsClaimsProviderTrust
Remove-AdfsClientRemove-AdfsClient
Remove-AdfsDeviceRegistrationUpnSuffixRemove-AdfsDeviceRegistrationUpnSuffix
Remove-AdfsFarmNodeRemove-AdfsFarmNode
Remove-AdfsGlobalWebContentRemove-AdfsGlobalWebContent
-Remove-AdfsLocalClaimsProviderTrust新規
Remove-AdfsNonClaimsAwareRelyingPartyTrustRemove-AdfsNonClaimsAwareRelyingPartyTrust
-Remove-AdfsPolicyTemplate新規
Remove-AdfsRelyingPartyTrustRemove-AdfsRelyingPartyTrust
Remove-AdfsRelyingPartyWebContentRemove-AdfsRelyingPartyWebContent
-Remove-AdfsRelyingPartyWebTheme新規
-Remove-AdfsScopeDescription新規
Remove-AdfsWebApplicationProxyRelyingPartyTrustRemove-AdfsWebApplicationProxyRelyingPartyTrust
Remove-AdfsWebThemeRemove-AdfsWebTheme
-Restore-AdfsFarmBehaviorLevel新規
-Revoke-AdfsApplicationPermission新規
Revoke-AdfsProxyTrustRevoke-AdfsProxyTrust
Set-AdfsAdditionalAuthenticationRuleSet-AdfsAdditionalAuthenticationRule
-Set-AdfsApplicationPermission新規
Set-AdfsAttributeStoreSet-AdfsAttributeStore
Set-AdfsAuthenticationProviderWebContentSet-AdfsAuthenticationProviderWebContent
Set-AdfsCertificateSet-AdfsCertificate
Set-AdfsCertSharingContainerSet-AdfsCertSharingContainer
Set-AdfsClaimDescriptionSet-AdfsClaimDescription
Set-AdfsClaimsProviderTrustSet-AdfsClaimsProviderTrust
Set-AdfsClientSet-AdfsClient
Set-AdfsDeviceRegistrationSet-AdfsDeviceRegistration
Set-AdfsDeviceRegistrationUpnSuffixSet-AdfsDeviceRegistrationUpnSuffix
Set-AdfsEndpointSet-AdfsEndpoint
Set-AdfsGlobalAuthenticationPolicySet-AdfsGlobalAuthenticationPolicy
Set-AdfsGlobalWebContentSet-AdfsGlobalWebContent
-Set-AdfsLocalClaimsProviderTrust新規
Set-AdfsNonClaimsAwareRelyingPartyTrustSet-AdfsNonClaimsAwareRelyingPartyTrust
-Set-AdfsPolicyTemplate新規
Set-AdfsPropertiesSet-AdfsProperties
Set-AdfsRegistrationHostsSet-AdfsRegistrationHosts
Set-AdfsRelyingPartyTrustSet-AdfsRelyingPartyTrust
Set-AdfsRelyingPartyWebContentSet-AdfsRelyingPartyWebContent
-Set-AdfsRelyingPartyWebTheme新規
-Set-AdfsScopeDescription新規
Set-AdfsSslCertificateSet-AdfsSslCertificate
Set-AdfsSyncPropertiesSet-AdfsSyncProperties
Set-AdfsWebApplicationProxyRelyingPartyTrustSet-AdfsWebApplicationProxyRelyingPartyTrust
Set-AdfsWebConfigSet-AdfsWebConfig
Set-AdfsWebThemeSet-AdfsWebTheme
-Test-AdfsFarmBehaviorLevelRaise新規
-Test-AdfsFarmBehaviorLevelRestore新規
Test-AdfsFarmInstallationTest-AdfsFarmInstallation
Test-AdfsFarmJoinTest-AdfsFarmJoin
Unregister-AdfsAuthenticationProviderUnregister-AdfsAuthenticationProvider
Update-AdfsCertificateUpdate-AdfsCertificate
Update-AdfsClaimsProviderTrustUpdate-AdfsClaimsProviderTrust
Update-AdfsRelyingPartyTrustUpdate-AdfsRelyingPartyTrust


0 件のコメント: