Configure claims settings (PowerShell)


Applies To: Dynamics CRM 2013

This sample code is Microsoft Dynamics CRM 2013. Download the Microsoft Dynamics CRM SDK package. It can be found in the following location in the download package:



To set up the Microsoft Dynamics CRM PowerShell cmdlets, see Administer the deployment using Windows PowerShell.


The following script enables or disables claims authentication. You must specify the following parameters:

Enabled - A Boolean that specifies whether claims authentication is enabled or disabled.

EncryptionCertificate – An encryption certificate.

FederationMetadataUrl – A URL for federation metadata.


    #optional params

$RemoveSnapInWhenDone = $False

if (-not (Get-PSSnapin -Name Microsoft.Crm.PowerShell -ErrorAction SilentlyContinue))
    Add-PSSnapin Microsoft.Crm.PowerShell
    $RemoveSnapInWhenDone = $True

$ClaimsSettings = Get-CrmSetting -SettingType ClaimsSettings

if($PSBoundParameters.ContainsKey('Enabled')) {$ClaimsSettings.Enabled = $Enabled}
if($EncryptionCertificate) {$ClaimsSettings.EncryptionCertificate = $EncryptionCertificate}
if($FederationMetadataUrl) {$ClaimsSettings.FederationMetadataUrl = $FederationMetadataUrl}

Set-CrmSetting -Setting $ClaimsSettings


    Remove-PSSnapin Microsoft.Crm.PowerShell

See Also

Administer the deployment using Windows PowerShell
Examples of Windows PowerShell commands
Get and set deployment configuration settings
Add a deployment administrator (PowerShell)
Create an organization (PowerShell)
Configure web address settings (PowerShell)
Configure IFD settings (PowerShell)
Delete a deployment administrator

© 2016 Microsoft Corporation. All rights reserved. Copyright