Share via


IMicrosoftGraphInternalDomainFederation Interface

Definition

[System.ComponentModel.TypeConverter(typeof(Microsoft.Azure.PowerShell.Cmdlets.Resources.MSGraph.Models.ApiV10.MicrosoftGraphInternalDomainFederationTypeConverter))]
public interface IMicrosoftGraphInternalDomainFederation : Microsoft.Azure.PowerShell.Cmdlets.Resources.MSGraph.Models.ApiV10.IMicrosoftGraphSamlOrWsFedProvider, Microsoft.Azure.PowerShell.Cmdlets.Resources.MSGraph.Runtime.IAssociativeArray<object>
[<System.ComponentModel.TypeConverter(typeof(Microsoft.Azure.PowerShell.Cmdlets.Resources.MSGraph.Models.ApiV10.MicrosoftGraphInternalDomainFederationTypeConverter))>]
type IMicrosoftGraphInternalDomainFederation = interface
    interface IJsonSerializable
    interface IMicrosoftGraphSamlOrWsFedProvider
    interface IMicrosoftGraphIdentityProviderBase
    interface IMicrosoftGraphEntity
    interface IAssociativeArray<obj>
Public Interface IMicrosoftGraphInternalDomainFederation
Implements IAssociativeArray(Of Object), IMicrosoftGraphSamlOrWsFedProvider
Derived
Attributes
Implements

Properties

ActiveSignInUri

URL of the endpoint used by active clients when authenticating with federated domains set up for single sign-on in Azure Active Directory (Azure AD). Corresponds to the ActiveLogOnUri property of the Set-MsolDomainFederationSettings MSOnline v1 PowerShell cmdlet.

AdditionalProperties (Inherited from IAssociativeArray<T>)
DisplayName

The display name of the identity provider.

(Inherited from IMicrosoftGraphIdentityProviderBase)
FederatedIdpMfaBehavior

federatedIdpMfaBehavior

Id

The unique idenfier for an entity. Read-only.

(Inherited from IMicrosoftGraphEntity)
IsSignedAuthenticationRequestRequired

If true, when SAML authentication requests are sent to the federated SAML IdP, Azure AD will sign those requests using the OrgID signing key. If false (default), the SAML authentication requests sent to the federated IdP are not signed.

IssuerUri

Issuer URI of the federation server.

(Inherited from IMicrosoftGraphSamlOrWsFedProvider)
Item[String] (Inherited from IAssociativeArray<T>)
MetadataExchangeUri

URI of the metadata exchange endpoint used for authentication from rich client applications.

(Inherited from IMicrosoftGraphSamlOrWsFedProvider)
NextSigningCertificate

Fallback token signing certificate that is used to sign tokens when the primary signing certificate expires. Formatted as Base64 encoded strings of the public portion of the federated IdP's token signing certificate. Needs to be compatible with the X509Certificate2 class. Much like the signingCertificate, the nextSigningCertificate property is used if a rollover is required outside of the auto-rollover update, a new federation service is being set up, or if the new token signing certificate is not present in the federation properties after the federation service certificate has been updated.

PassiveSignInUri

URI that web-based clients are directed to when signing in to Azure Active Directory (Azure AD) services.

(Inherited from IMicrosoftGraphSamlOrWsFedProvider)
PreferredAuthenticationProtocol

authenticationProtocol

(Inherited from IMicrosoftGraphSamlOrWsFedProvider)
PromptLoginBehavior

promptLoginBehavior

SigningCertificate

Current certificate used to sign tokens passed to the Microsoft identity platform. The certificate is formatted as a Base64 encoded string of the public portion of the federated IdP's token signing certificate and must be compatible with the X509Certificate2 class. This property is used in the following scenarios: if a rollover is required outside of the autorollover update a new federation service is being set up if the new token signing certificate isn't present in the federation properties after the federation service certificate has been updated. Azure AD updates certificates via an autorollover process in which it attempts to retrieve a new certificate from the federation service metadata, 30 days before expiry of the current certificate. If a new certificate isn't available, Azure AD monitors the metadata daily and will update the federation settings for the domain when a new certificate is available.

(Inherited from IMicrosoftGraphSamlOrWsFedProvider)
SigningCertificateUpdateStatus

signingCertificateUpdateStatus

SignOutUri

URI that clients are redirected to when they sign out of Azure AD services. Corresponds to the LogOffUri property of the Set-MsolDomainFederationSettings MSOnline v1 PowerShell cmdlet.

Methods

Add(String, T) (Inherited from IAssociativeArray<T>)
Clear() (Inherited from IAssociativeArray<T>)
ContainsKey(String) (Inherited from IAssociativeArray<T>)
Remove(String) (Inherited from IAssociativeArray<T>)
ToJson(JsonObject, SerializationMode) (Inherited from IJsonSerializable)
TryGetValue(String, T) (Inherited from IAssociativeArray<T>)

Applies to