Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2

Topic Last Modified: 2012-11-19

Use the Set-FederatedOrganizationIdentifier cmdlet to configure the federated organization identifier for the Exchange organization.

For more details, see Understanding Federation.

Syntax

Set-FederatedOrganizationIdentifier [-Identity <OrganizationIdParameter>] [-AccountNamespace <SmtpDomain>] [-Confirm [<SwitchParameter>]] [-DelegationFederationTrust <FederationTrustIdParameter>] [-DomainController <Fqdn>] [-Enabled <$true | $false>] [-OrganizationContact <SmtpAddress>] [-WhatIf [<SwitchParameter>]]

Detailed Description

A federated organization identifier is created as an account namespace for your Exchange organization with the Microsoft Federation Gateway and enables federation for the purpose of sharing calendars or contacts, accessing free/busy information across Exchange organizations, and securing cross-premises e-mail delivery using federated delivery. An organization's federated organization identifier is automatically created that uses a unique sub-domain for your organization. This sub-domain uses a combination of a well-known string “FYDIBOHF25SPDLT” and one of the federated domains for your organization. For example, if one of your organization’s federated domains is “contoso.com”, the “FYDIBOHF25SPDLT.contoso.com” account namespace will be created automatically as the OrgID for the federation trust. The only purpose of this subdomain is to serve as the federated namespace for the Microsoft Federation Gateway to maintain unique identifiers for recipients that request SAML delegation tokens. Additional domain names can be added and removed later by using the Add-FederatedDomain and Remove-FederatedDomain cmdlets.

You can temporarily disable federation by disabling the organization identifier.

You need to be assigned permissions before you can run this cmdlet. Although all parameters for this cmdlet are listed in this topic, you may not have access to some parameters if they're not included in the permissions assigned to you. To see what permissions you need, see the "Federation trusts" entry in the Exchange and Shell Infrastructure Permissions topic.

Parameters

Parameter Required Type Description

AccountNamespace

Optional

Microsoft.Exchange.Data.SmtpDomain

The AccountNamespace parameter specifies the federated domain to be used to establish the organization identifier with the Microsoft Federation Gateway. This is unique to your organization and is formatted as FYDIBOHF25SPDLT.<your domain>.

Confirm

Optional

System.Management.Automation.SwitchParameter

The Confirm switch causes the command to pause processing and requires you to acknowledge what the command will do before processing continues. You don't have to specify a value with the Confirm switch.

DelegationFederationTrust

Optional

Microsoft.Exchange.Configuration.Tasks.FederationTrustIdParameter

The DelegationFederationTrust parameter specifies the identity of the federation trust to be used by the organization identifier.

DomainController

Optional

Microsoft.Exchange.Data.Fqdn

The DomainController parameter specifies the fully qualified domain name (FQDN) of the domain controller that writes this configuration change to Active Directory.

Enabled

Optional

System.Boolean

The Enabled parameter specifies whether the organization identifier is enabled. Valid values include $true or $false.

Setting the parameter to $false disables federation.

Identity

Optional

Microsoft.Exchange.Configuration.Tasks.OrganizationIdParameter

The Identity parameter specifies the federated organization identifier.

OrganizationContact

Optional

Microsoft.Exchange.Data.SmtpAddress

The OrganizationContact parameter specifies the SMTP address of the federation contact.

WhatIf

Optional

System.Management.Automation.SwitchParameter

The WhatIf switch instructs the command to simulate the actions that it would take on the object. By using the WhatIf switch, you can view what changes would occur without having to apply any of those changes. You don't have to specify a value with the WhatIf switch.

Input Types

To see the input types that this cmdlet accepts, see Cmdlet Input and Output Types. If the Input Type field for a cmdlet is blank, the cmdlet doesn’t accept input data.

Return Types

To see the return types, which are also known as output types, that this cmdlet accepts, see Cmdlet Input and Output Types. If the Output Type field is blank, the cmdlet doesn’t return data.

Examples

EXAMPLE 1

This example configures a federated organization identifier for the Exchange organization.

Copy Code
Set-FederatedOrganizationIdentifier -DelegationFederationTrust "Microsoft Federation Gateway" -AccountNamespace "contoso.com" -Enabled $true

EXAMPLE 2

This example temporarily disables federation for the Exchange organization.

Copy Code
Set-FederatedOrganizationIdentifier -Enabled $false

EXAMPLE 3

This example enables the organization identifier. This enables federation for the Exchange organization.

Copy Code
Set-FederatedOrganizationIdentifier -Enabled $true