Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2
Topic Last Modified: 2012-11-19
Use the Set-FederatedOrganizationIdentifier cmdlet to configure the federated organization identifier for the Exchange organization.
For more details, see Understanding Federation.
Syntax
Set-FederatedOrganizationIdentifier [-Identity
<OrganizationIdParameter>] [-AccountNamespace
<SmtpDomain>] [-Confirm [<SwitchParameter>]]
[-DelegationFederationTrust <FederationTrustIdParameter>]
[-DomainController <Fqdn>] [-Enabled <$true | $false>]
[-OrganizationContact <SmtpAddress>] [-WhatIf
[<SwitchParameter>]]
|
Detailed Description
A federated organization identifier is created as an account namespace for your Exchange organization with the Microsoft Federation Gateway and enables federation for the purpose of sharing calendars or contacts, accessing free/busy information across Exchange organizations, and securing cross-premises e-mail delivery using federated delivery. An organization's federated organization identifier is automatically created that uses a unique sub-domain for your organization. This sub-domain uses a combination of a well-known string “FYDIBOHF25SPDLT” and one of the federated domains for your organization. For example, if one of your organization’s federated domains is “contoso.com”, the “FYDIBOHF25SPDLT.contoso.com” account namespace will be created automatically as the OrgID for the federation trust. The only purpose of this subdomain is to serve as the federated namespace for the Microsoft Federation Gateway to maintain unique identifiers for recipients that request SAML delegation tokens. Additional domain names can be added and removed later by using the Add-FederatedDomain and Remove-FederatedDomain cmdlets.
You can temporarily disable federation by disabling the organization identifier.
You need to be assigned permissions before you can run this cmdlet. Although all parameters for this cmdlet are listed in this topic, you may not have access to some parameters if they're not included in the permissions assigned to you. To see what permissions you need, see the "Federation trusts" entry in the Exchange and Shell Infrastructure Permissions topic.
Parameters
| Parameter | Required | Type | Description |
|---|---|---|---|
|
AccountNamespace |
Optional |
Microsoft.Exchange.Data.SmtpDomain |
The AccountNamespace parameter specifies the federated domain to be used to establish the organization identifier with the Microsoft Federation Gateway. This is unique to your organization and is formatted as FYDIBOHF25SPDLT.<your domain>. |
|
Confirm |
Optional |
System.Management.Automation.SwitchParameter |
The Confirm switch causes the command to pause processing and requires you to acknowledge what the command will do before processing continues. You don't have to specify a value with the Confirm switch. |
|
DelegationFederationTrust |
Optional |
Microsoft.Exchange.Configuration.Tasks.FederationTrustIdParameter |
The DelegationFederationTrust parameter specifies the identity of the federation trust to be used by the organization identifier. |
|
DomainController |
Optional |
Microsoft.Exchange.Data.Fqdn |
The DomainController parameter specifies the fully qualified domain name (FQDN) of the domain controller that writes this configuration change to Active Directory. |
|
Enabled |
Optional |
System.Boolean |
The Enabled parameter specifies whether the organization
identifier is enabled. Valid values include Setting the parameter to |
|
Identity |
Optional |
Microsoft.Exchange.Configuration.Tasks.OrganizationIdParameter |
The Identity parameter specifies the federated organization identifier. |
|
OrganizationContact |
Optional |
Microsoft.Exchange.Data.SmtpAddress |
The OrganizationContact parameter specifies the SMTP address of the federation contact. |
|
WhatIf |
Optional |
System.Management.Automation.SwitchParameter |
The WhatIf switch instructs the command to simulate the actions that it would take on the object. By using the WhatIf switch, you can view what changes would occur without having to apply any of those changes. You don't have to specify a value with the WhatIf switch. |
Input Types
To see the input types that this cmdlet accepts, see Cmdlet Input and Output Types. If the Input Type field for a cmdlet is blank, the cmdlet doesn’t accept input data.
Return Types
To see the return types, which are also known as output types, that this cmdlet accepts, see Cmdlet Input and Output Types. If the Output Type field is blank, the cmdlet doesn’t return data.
Examples
EXAMPLE 1
This example configures a federated organization identifier for the Exchange organization.
 Copy Code |
|
|---|---|
Set-FederatedOrganizationIdentifier -DelegationFederationTrust "Microsoft Federation Gateway" -AccountNamespace "contoso.com" -Enabled $true |
|
EXAMPLE 2
This example temporarily disables federation for the Exchange organization.
| Copy Code |
|
|---|---|
Set-FederatedOrganizationIdentifier -Enabled $false |
|
EXAMPLE 3
This example enables the organization identifier. This enables federation for the Exchange organization.
| Copy Code |
|
|---|---|
Set-FederatedOrganizationIdentifier -Enabled $true |
|