Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
ADFS cmdlets: Need to change secure-hash algo to SHA-1 RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    I am configuring ADFS RP thru poweshell cmdlets and I used following script to add RP trust with SignatureAlgorithm to ‘SHA-1′. But it is not changing the secure-hash algorithm to SHA-1 and its pointing to SHA-256.

    Add-ADFSRelyingPartyTrust -Name ‘TSS′ -MetadataFile ‘C:\Users\windows\Desktop\sp.xml’ -SignatureAlgorithm ‘http://www.w3.org/2000/09/xmldsig#rsa-sha1′

    After running the cmd, I see RP that secure-hash algo is pointing to SHA-256 and not SHA-1/

    Can you pls let me know how should I make the secure-hash algorithm to SHA-1 thru cmdlets only?

    Appreciate your help.

    Thanks
    SGK



    • Edited by GKS14 Thursday, November 8, 2012 4:09 AM sunj change
    Thursday, November 8, 2012 3:58 AM

Answers

  • Question
    Sign in to vote
    1
    Sign in to vote

    Hi,

    after having added your relying party to ADFS you could maybe try this:

    Set-ADFSRelyingPartyTrust -TargetName rpName -SignatureAlgorithm http://www.w3.org/2000/09/xmldsig#rsa-sha1

    Greetings,

    Pavlos

    Please mark this reply as an answer and vote it as helpful if it helps you find a resolution to your problem.
    View my latest gallery contribution here.
    Visit my blog here.

    • Marked as answer by GKS14 Thursday, November 8, 2012 6:01 PM
    Thursday, November 8, 2012 8:25 AM

All replies

  • Question
    Sign in to vote
    1
    Sign in to vote

    Hi,

    after having added your relying party to ADFS you could maybe try this:

    Set-ADFSRelyingPartyTrust -TargetName rpName -SignatureAlgorithm http://www.w3.org/2000/09/xmldsig#rsa-sha1

    Greetings,

    Pavlos

    Please mark this reply as an answer and vote it as helpful if it helps you find a resolution to your problem.
    View my latest gallery contribution here.
    Visit my blog here.

    • Marked as answer by GKS14 Thursday, November 8, 2012 6:01 PM
    Thursday, November 8, 2012 8:25 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    It worked.

    Thanks Pavlos!!

    Thursday, November 8, 2012 6:02 PM