Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions windows/adfs-oauth2-appgroup-2019.ps1
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ if (get-adfsapplicationgroup -Name $ClientRoleIdentifier) {
#Create the ADFS Server Application and generate the client secret.
$ADFSApp = Get-AdfsServerApplication -Name "$ClientRoleIdentifier - Server app"
if ($ADFSApp) {
write-host "SKIP New-AdfsApplicationGroup '$ClientRoleIdentifier - Server app'"
write-host "SKIP Add-AdfsServerApplication '$ClientRoleIdentifier - Server app'"
$identifier = $ADFSApp.identifier
}else {
# Creates a new GUID for use by the application group
Expand All @@ -44,7 +44,7 @@ if (!(Get-AdfsScopeDescription -name api_delete)) {
}

#Grant the ADFS Application the allatclaims and openid permissions
if ( (Get-AdfsApplicationPermission -ClientRoleIdentifier $identifier) -and (Get-AdfsApplicationPermission -ClientRoleIdentifier $identifier) ) {
if ( (Get-AdfsApplicationPermission -ClientRoleIdentifier $identifier) -and (Get-AdfsApplicationPermission -ServerRoleIdentifier $identifier) ) {
write-host "SKIP found Get-AdfsApplicationPermission for both client/server identifier '$identifier'"
Set-AdfsApplicationPermission -TargetClientRoleIdentifier $identifier -TargetServerRoleIdentifier $identifier -ScopeNames @('allatclaims', 'openid', 'api_delete')
}else {
Expand All @@ -70,7 +70,7 @@ $relativePath = Get-Item .\issueancetransformrules.tmp
# Name the Web API Application and define its Issuance Transform Rules using an external file.
if (Get-AdfsWebApiApplication -Name "$ClientRoleIdentifier - Web API") {
write-host "SKIP Add-AdfsWebApiApplication -Name '$ClientRoleIdentifier - Web API'"
Set-AdfsWebApiApplication -Name "$ClientRoleIdentifier - Web API" -TargetIdentifier $identifier -IssuanceTransformRulesFile $relativePath
Add-AdfsWebApiApplication -Name "$ClientRoleIdentifier - Web API" -TargetIdentifier $identifier -IssuanceTransformRulesFile $relativePath
}else {
Set-AdfsWebApiApplication -Name "$ClientRoleIdentifier - Web API" -TargetIdentifier $identifier -IssuanceTransformRulesFile $relativePath
}
Expand Down