AdfsServerApplication - X-Guardian/AdfsDsc GitHub Wiki

AdfsServerApplication

Parameters

Parameter Attribute DataType Description Allowed Values
Name Key String Specifies the name for the server application.
Identifier Required String Specifies the identifier for the server application.
ApplicationGroupIdentifier Required String Specifies the ID of an application group.
RedirectUri Write StringArray[] Specifies an array of redirection URIs for the OAuth 2.0 client to register with AD FS. The redirection URI is specified by the OAuth 2.0 client when it requests authorization to access a resource in ADFS.
Description Write String Specifies a description for the server application.
ADUserPrincipalName Write String Specifies the Active Directory account that corresponds to the Server Application.
LogoutUri Write String Specifies the logout URI for the OAuth 2.0 client to register with the AD FS. When AD FS initiates a logout it redirects the client's user-agent to this URI by rendering this URI in an iframe. The value of this parameter must be an absolute URI, may include a query component, and must not include a fragment component.
Ensure Write String Specifies whether the ADFS server application should be present or absent. Default value is 'Present'. Present, Absent

Description

The AdfsServerApplication DSC resource manages Server Applications within Active Directory Federation Services. Server Applications are a construct that represents a confidential application that runs on a server and needs to authenticate a user with ADFS.

Requirements

  • Target machine must be running ADFS on Windows Server 2016 or above to use this resource.

Examples

Example 1

This configuration will add a server application to an application in Active Directory Federation Services (AD FS).

Configuration AdfsServerApplication_Config
{
    Import-DscResource -ModuleName AdfsDsc

    Node localhost
    {
        AdfsServerApplication ServerApp1
        {
            Name                       = 'ServerApp1'
            ApplicationGroupIdentifier = 'AppGroup1'
            Identifier                 = '6de768af-c656-424d-b79c-5024944c3b67'
            RedirectUri                = 'https://serverapp1.contoso.com'
            Description                = 'App1 Server App'
            ADUserPrincipalName        = 'CONTOSO\Svc.App1'
            LogoutUri                  = 'https://serverapp1.contoso.com/logout'
        }
    }
}