COMMAND EVERYTHING.

Add-AdfsNonClaimsAwareRelyingPartyTrust

Adds a relying party trust that represents a non-claims-aware web application or service to the Federation Service.

Active Directory · Risk: High · Documentation Verified

Last verified: 2026-10-26

Microsoft ADFS reference: Adds a relying party trust that represents a non-claims-aware web application or service to the Federation Service. The syntax and selected example below are adapted from the pinned Windows Server 2025 reference. Module availability, target configuration and delegated permissions determine whether it can run in your environment. Documentation and parameter text: Microsoft, CC BY 4.0; formatting adapted by Cmdlet World. No execution testing is claimed.

Add-AdfsNonClaimsAwareRelyingPartyTrust [-Name] <String> [-Identifier] <String[]>
 [-AlwaysRequireAuthentication] [-Enabled <Boolean>] [-IssuanceAuthorizationRules <String>]
 [-IssuanceAuthorizationRulesFile <String>] [-Notes <String>] [-PassThru]
 [-AdditionalAuthenticationRules <String>] [-AdditionalAuthenticationRulesFile <String>]
 [-AccessControlPolicyName <String>] [-AccessControlPolicyParameters <Object>] [-ClaimsProviderName <String[]>]
 [-WhatIf] [-Confirm] [<CommonParameters>]

Copied 0 times

Required permissions

Use an account with the target resource permissions documented for Add-AdfsNonClaimsAwareRelyingPartyTrust. Modifying administrative cmdlets may require elevation or delegated administration. This catalog does not assert that ordinary users can execute the command.

Supported environments

Windows / ADFS · Windows Server 2025 documentation; feature/module prerequisites apply

Parameters

-AdditionalAuthenticationRules: Specifies rules for additional authentication on the relying party. For more information about the claims language for rules, see Understanding Claim Rule Language in AD FS 2.0 & Higher on TechNet.
-AdditionalAuthenticationRulesFile: Specifies the file that contains all the rules for additional authentication for the relying party.
-AlwaysRequireAuthentication: Indicates that access requires authentication, even if this relying party has previously authenticated credentials for access. Specify this parameter to require users to always supply credentials to access sensitive resources.
-Confirm: Prompts you for confirmation before running the cmdlet.
-Enabled: Indicates whether to enable this relying party trust. Specify a value of $True for this parameter to allow authentication and authorization to the relying party.
-Identifier (required): Specifies an array of unique identifiers for the non-claims-aware relying party trust. No other trust can use an identifier from this list. As common practice, you can use Uniform Resource Identifiers (URIs) as unique identifiers for a relying party trust, or you can use any string.
-IssuanceAuthorizationRules: Specifies the authorization rules for issuing claims to the relying party.
-IssuanceAuthorizationRulesFile: Specifies the file that contains the authorization rules for issuing claims to the relying party.
-Name (required): Specifies a name. The cmdlet adds the Web Application Proxy relying party trust that has the display name that you specify.
-Notes: Specifies notes for the relying party trust. Use this parameter to store information such as owners and contacts when you manage a large number of applications.
-PassThru: Returns an object representing the item with which you are working. By default, this cmdlet does not generate any output.
-WhatIf: Shows what would happen if the cmdlet runs. The cmdlet is not run.

Prerequisites

Windows with the ADFS module and the Windows feature or management tools that provide it. Confirm target connectivity and version compatibility using the linked Microsoft reference.

Security considerations

This cmdlet changes system state. Review every target and parameter in the official reference, test outside production, and prepare an appropriate backup or rollback. Do not execute the example automatically.

Examples

Example 1: Add a non-claims-aware relying party trust for an application

Add-AdfsNonClaimsAwareRelyingPartyTrust -Name "ExpenseReport" -Identifier "https://contosoexpense/" -IssuanceAuthorizationRules "=>issue(Type = "http://schemas.microsoft.com/authorization/claims/permit", Value = "true");"

This command adds a non-claims-aware relying party trust for the application named ExpenseReport and allows all authenticated users to access this application through the Web Application Proxy. Source: Microsoft, CC BY 4.0; transcript prompt/output removed. This example was not executed.

Sources

https://github.com/MicrosoftDocs/windows-powershell-docs/blob/b7645dd8c687139b28e845119da30ec670526507/docset/winserver2025-ps/ADFS/Add-AdfsNonClaimsAwareRelyingPartyTrust.md

https://learn.microsoft.com/powershell/module/adfs/add-adfsnonclaimsawarerelyingpartytrust?view=windowsserver2025-ps

Personal collections

Explain or customize this command with AI

Related commands

Get-ADComputer

Get-ADGroup

Get-ADGroupMember

Get-ADPrincipalGroupMembership