Topic Last Modified: 2014-02-19

Creates a new Open Authorization (OAuth) server for use by the organization. OAuth servers, also known as security token servers, issue security tokens used in server-to-server authentication and authorization. This cmdlet was introduced in Lync Server 2013.

Syntax


`New-CsOAuthServer -MetadataUrl <String> [-AuthorizationUriOverride <String>] [-Confirm [<SwitchParameter>]] [-Force <SwitchParameter>] [-Identity <XdsGlobalRelativeIdentity>] [-InMemory <SwitchParameter>] [-Realm <String>] [-Tenant <Guid>] [-Type <String>] [-WhatIf [<SwitchParameter>]]`

Examples

Example 1

Example 1 creates a new OAuth Server named "Office 365". The new server uses the metadata URL https://sts.office365.microsoft.com/metadata/json/1.

	Copy Code
New-CsOAuthServer -Identity "Office 365" -MetadataUrl "https://sts.office365.microsoft.com/metadata/json/1"

Detailed Description

In Lync Server 2013, server-to-server authentication (for example, the authentication that enables Lync Server 2013 and Microsoft Exchange Server 2013 to share information) is carried out using the OAuth security protocol. This type of authentication typically requires three servers: the two servers that need to communicate with one another (Server A and B) and a third-party security token server. If Servers A and B need to communicate with one another, the two servers contact the token server (also known as an OAuth server) and obtain mutually-trusted security tokens that the two servers can exchange in order to prove their identities.

If you are using an on-premises version of Lync Server 2013 and you need to communicate with another server product that fully supports the OAuth protocol (for example, Exchange 2013 or Microsoft SharePoint 2013) then you typically do not need to use a token server; that's because these server products are able to issue their own security tokens. However, if you need to communicate with another server product (including server products found on Office 365) then you will need to use a token servers. These token servers can be managed by using the CsOAuthServer cmdlets.

To return a list of all the role-based access control (RBAC) roles this cmdlet has been assigned to (including any custom RBAC roles you have created yourself), run the following command from the Windows PowerShell command-line interface prompt:

Get-CsAdminRole | Where-Object {$_.Cmdlets –match "New-CsOAuthServer"}

Lync Server Control Panel: The functions carried out by the New-CsOAuthServer cmdlet are not available in the Lync Server Control Panel.

Parameters

Parameter	Required	Type	Description
MetadataUrl	Required	System.String	URL where the WS-FederationMetadata for the server is published. Servers use the metadata to agree on the types of tokens that will be exchanged as well the keys that will be used to sign these tokens. Note that the specified URL must be available when you run the New-CsOAuthServer cmdlet or else the command will fail.
AuthorizationUriOverride	Optional	System.String	PARAMVALUE: String
Confirm	Optional	System.Management.Automation.SwitchParameter	Prompts you for confirmation before executing the command.
Force	Optional	System.Management.Automation.SwitchParameter	Suppresses the display of any non-fatal error message that might occur when running the command.
Identity	Optional	Microsoft.Rtc.Management.Xds.XdsGlobalRelativeIdentity	Friendly (and unique) name used to identify the OAuth server.
InMemory	Optional	System.Management.Automation.SwitchParameter	Creates an object reference without actually committing the object as a permanent change. If you assign the output of this cmdlet called with this parameter to a variable, you can make changes to the properties of the object reference and then commit those changes by calling this cmdlet’s matching Set- cmdlet.
Realm	Optional	System.String	Server-to-server security container. By default, Lync Server 2013 uses your default SIP domain as its OAuth realm.
Tenant	Optional	System.Guid	Globally unique identifier (GUID) of the Lync Online tenant account for which the new OAuth server is being created. For example: –Tenant "38aad667-af54-4397-aaa7-e94c79ec2308" You can return the tenant ID for each of your tenants by running this command: Get-CsTenant \| Select-Object DisplayName, TenantID
Type	Optional	System.String	PARAMVALUE: String
WhatIf	Optional	System.Management.Automation.SwitchParameter	Describes what would happen if you executed the command without actually executing the command.

Input Types

None. The New-CsOAuthServer cmdlet does not accept pipelined input.

Return Types

The New-CsOAuthServer cmdlet creates new instances of the Microsoft.Rtc.Management.WritableConfig.Settings.SSAuth.OAuthServer#Decorated object.