Modifies the configuration settings of a Web Application Proxy server.
PowerShell · Risk: High · Documentation Verified
Last verified: 2026-10-26
Microsoft WebApplicationProxy reference: Modifies the configuration settings of a Web Application Proxy server. The syntax and selected example below are adapted from the pinned Windows Server 2025 reference. Module availability, target configuration and delegated permissions determine whether it can run in your environment. Documentation and parameter text: Microsoft, CC BY 4.0; formatting adapted by Cmdlet World. No execution testing is claimed.
Use an account with the target resource permissions documented for Set-WebApplicationProxyConfiguration. Modifying administrative cmdlets may require elevation or delegated administration. This catalog does not assert that ordinary users can execute the command.
Supported environments
Windows / WebApplicationProxy · Windows Server 2025 documentation; feature/module prerequisites apply
Parameters
-ADFSSignOutURL
Specifies the sign out URL for Web Application Proxy.
-ADFSTokenAcceptanceDurationSec
Specifies the maximum duration in seconds until when the Web Application Proxy server accepts the edge token issued by the AD FS server.
-ADFSTokenSigningCertificatePublicKey
Specifies the thumbprint of the certificate that the federation server uses to sign the edge token. The thumbprint is the SHA-1 hash of the certificate and consists of 40 hexadecimal characters. Specify this parameter only when the AD FS token signing certificate changes.
-ADFSUrl
Specifies the URL for the federation server that is used by the Web Application Proxy. The Web Application Proxy Configuration Wizard populates this setting, and there is no requirement that you manually change it.
-ADFSWebApplicationProxyRelyingPartyUri
Specifies the URI for the Web Application Proxy server.
-AsJob
Runs the cmdlet as a background job. Use this parameter to run commands that take a long time to complete.
-CimSession
Runs the cmdlet in a remote session or on a remote computer. Enter a computer name or a session object, such as the output of a New-CimSession or Get-CimSession cmdlet. The default is the current session on the local computer.
-ConfigurationChangesPollingIntervalSec
Specifies the time interval, in seconds, that elapses before the Web Application Proxy servers query a federation server for configuration changes.
-ConnectedServersName
Specifies an array of Web Application Proxy servers that are connected to a federation server.
-OAuthAuthenticationURL
Specifies the URL of the federation server that performs Open Authorization (OAuth) authentication when end users connect to a published web application using a Windows Store app.
-RegenerateAccessCookiesEncryptionKey
Specifies whether to create a new encryption key to be used by Web Application Proxy servers to encrypt proxy cookies. All Web Application Proxy servers use the encryption key to validate the access cookie, even if the cookie was issued by another Web Application Proxy server. You should specify this parameter whenever you want to change the encryption key that is used to encrypt the proxy cookies.
-ThrottleLimit
Specifies the maximum number of concurrent operations that can be established to run the cmdlet. If this parameter is omitted or a value of 0 is entered, then Windows PowerShell® calculates an optimum throttle limit for the cmdlet based on the number of CIM cmdlets that are running on the computer. The throttle limit applies only to the current cmdlet, not to the session or to the computer.
-UpgradeConfigurationVersion
Indicates whether this cmdlet uses the upgrade configuration version setting.
-UserIdleTimeoutAction
Specifies whether inactive user will be redirected to the AD FS for signout or reauthentication.
-UserIdleTimeoutSec
Specifies the inactivity time interval, in seconds, after which Web Application Proxy will redirect users to AD FS.
Prerequisites
Windows with the WebApplicationProxy module and the Windows feature or management tools that provide it. Confirm target connectivity and version compatibility using the linked Microsoft reference.
Security considerations
This cmdlet changes system state. Review every target and parameter in the official reference, test outside production, and prepare an appropriate backup or rollback. Do not execute the example automatically.
Examples
Example 1: Modify the proxy to check for configuration changes
This command modifies the Web Application Proxy to query the federation server every 300 seconds for configuration changes. Source: Microsoft, CC BY 4.0; transcript prompt/output removed. This example was not executed.