New-SPSecureStoreTargetApplicationCreates a new Secure Store target application.NewSPSecureStoreTargetApplicationNew-SPSecureStoreTargetApplicationApplicationTypeIndividual | Group | IndividualWithTicketing | GroupWithTicketing | RestrictedIndividual | RestrictedGroupFriendlyNameStringNameStringAssignmentCollectionSPAssignmentCollectionContactEmailStringSetCredentialsUriUriTimeoutInMinutesInt32ApplicationTypeSpecifies the type of target application.The type must be one of the following: Individual, Group, IndividualWithTicketing, GroupWithTicketing, RestrictedIndividual, or RestrictedGroup. Individual | Group | IndividualWithTicketing | GroupWithTicketing | RestrictedIndividual | RestrictedGroupIndividual | Group | IndividualWithTicketing | GroupWithTicketing | RestrictedIndividual | RestrictedGroup FriendlyNameSpecifies the name of the new target application.StringString NameSpecifies the display name of the new target application.StringString AssignmentCollectionManages objects for the purpose of proper disposal. Use of objects, such as SPWeb or SPSite, can use large amounts of memory and use of these objects in Windows PowerShell scripts requires proper memory management. Using the SPAssignment object, you can assign objects to a variable and dispose of the objects after they are needed to free up memory. When SPWeb, SPSite, or SPSiteAdministration objects are used, the objects are automatically disposed of if an assignment collection or the Global parameter is not used.When the Global parameter is used, all objects are contained in the global store. If objects are not immediately used, or disposed of by using the Stop-SPAssignment command, an out-of-memory scenario can occur.SPAssignmentCollectionSPAssignmentCollection ContactEmailSpecifies the contact information for the target application.StringString SetCredentialsUriSpecifies the URI for setting the user application credentials.The type must be a valid URI, in the form file:\\server_name\sitedocs.UriUri TimeoutInMinutesThe time, in minutes, a ticket is valid if it is not redeemed by the target application. Make sure that the ticket time-out value is long enough to last between the time when the ticket is issued to the time that it is redeemed The default value is 2.The type must be a valid integer.Int32Int32 The New-SPSecureStoreTargetApplication cmdlet creates a new Secure Store Target application.------------------EXAMPLE 1------------------ C:\PS>New-SPSecureStoreTargetApplication -Name "ContosoTargetApplication" -FriendlyName "Contoso Target Application" -ApplicationType GroupThis example creates a new group type target application with the given name and friendly display name.New-SPSecureStoreApplicationField New-SPSecureStoreTargetApplication New-SPSecureStoreApplicationFieldCreates a new Secure Store application fields object.NewSPSecureStoreApplicationFieldNew-SPSecureStoreApplicationFieldMaskedSwitchParameterNameStringTypeUserName | Password | Pin | Key | Generic | WindowsUserName | WindowsPasswordAssignmentCollectionSPAssignmentCollectionMaskedMasks the visible characters that are typed in the field.SwitchParameterSwitchParameter NameSpecifies the name of the new target application field.StringString TypeSpecifies the type of credential field to add to a target application.The type must be one of the following: UserName, Password, Pin, Key, Generic, WindowsUserName, or WindowsPassword.UserName | Password | Pin | Key | Generic | WindowsUserName | WindowsPasswordUserName | Password | Pin | Key | Generic | WindowsUserName | WindowsPassword AssignmentCollectionManages objects for the purpose of proper disposal. Use of objects, such as SPWeb or SPSite, can use large amounts of memory and use of these objects in Windows PowerShell scripts requires proper memory management. Using the SPAssignment object, you can assign objects to a variable and dispose of the objects after they are needed to free up memory. When SPWeb, SPSite, or SPSiteAdministration objects are used, the objects are automatically disposed of if an assignment collection or the Global parameter is not used.When the Global parameter is used, all objects are contained in the global store. If objects are not immediately used, or disposed of by using the Stop-SPAssignment command, an out-of-memory scenario can occur.SPAssignmentCollectionSPAssignmentCollection The New-SPSecureStoreApplicationField cmdlet creates a new Secure Store application field object for a target application.------------------EXAMPLE------------------ C:\PS>New-SPSecureStoreApplicationField -Name "UserName" -Type WindowsUserName -Masked:$falseThis example creates a new credential field of type WindowsUserName with the name UserName, and the masked property (which when true will hide characters as they are typed in by the user) set to false. This cmdlet is typically used in conjunction with the New-SPSecureStoreApplication cmdlet.New-SPSecureStoreTargetApplicationNew-SPSecureStoreApplication New-SPSecureStoreApplicationField Get-SPSecureStoreApplicationReturns a Secure Store application.GetSPSecureStoreApplicationGet-SPSecureStoreApplicationNameStringServiceContextSPServiceContextPipeBindAssignmentCollectionSPAssignmentCollectionGet-SPSecureStoreApplicationAllSwitchParameterServiceContextSPServiceContextPipeBindAssignmentCollectionSPAssignmentCollectionNameSpecifies the name of the Secure Store application to get.StringString ServiceContextSpecifies the service context for the local Secure Store application to connect to.SPServiceContextPipeBindSPServiceContextPipeBind AssignmentCollectionManages objects for the purpose of proper disposal. Use of objects, such as SPWeb or SPSite, can use large amounts of memory and use of these objects in Windows PowerShell scripts requires proper memory management. Using the SPAssignment object, you can assign objects to a variable and dispose of the objects after they are needed to free up memory. When SPWeb, SPSite, or SPSiteAdministration objects are used, the objects are automatically disposed of if an assignment collection or the Global parameter is not used.When the Global parameter is used, all objects are contained in the global store. If objects are not immediately used, or disposed of by using the Stop-SPAssignment command, an out-of-memory scenario can occur.SPAssignmentCollectionSPAssignmentCollection The Get-SPSecureStoreApplication cmdlet returns a Secure Store application.------------------EXAMPLE 1------------------ C:\PS>$ssApp = Get-SPSecureStoreApplication -ServiceContext http://contoso -Name "ContosoTargetApplication"This example gets the Secure Store application for the target application with the name ContosoTargetApplication.------------------EXAMPLE 2------------------ C:\PS>-SPSecureStoreApplication -ServiceContext http://contoso -AllThis example returns all of the Secure Store applicationshttp://consoso.New-SPSecureStoreApplicationSet-SPSecureStoreApplicationRemove-SPSecureStoreApplicationUpdate-SPSecureStoreApplicationServerKey Get-SPSecureStoreApplication Update-SPSecureStoreCredentialMappingSets a new credential mapping for a Secure Store Service application.UpdateSPSecureStoreCredentialMappingUpdate-SPSecureStoreCredentialMappingIdentitySPSecureStoreApplicationPrincipalSPClaimValuesSecureString[]AssignmentCollectionSPAssignmentCollectionConfirmSwitchParameterWhatIfSwitchParameterIdentitySpecifies the Secure Store Service application (that contains the principal) from which to delete the credential mapping.SPSecureStoreApplicationSPSecureStoreApplication PrincipalSpecifies the SPClaims object that contains the principal.SPClaimSPClaim ValuesSpecifies the field values for the credential mapping.SecureString[]SecureString[] AssignmentCollectionManages objects for the purpose of proper disposal. Use of objects, such as SPWeb or SPSite, can use large amounts of memory and use of these objects in Windows PowerShell scripts requires proper memory management. Using the SPAssignment object, you can assign objects to a variable and dispose of the objects after they are needed to free up memory. When SPWeb, SPSite, or SPSiteAdministration objects are used, the objects are automatically disposed of if an assignment collection or the Global parameter is not used.When the Global parameter is used, all objects are contained in the global store. If objects are not immediately used, or disposed of by using the Stop-SPAssignment command, an out-of-memory scenario can occur.SPAssignmentCollectionSPAssignmentCollection ConfirmPrompts you for confirmation before executing the command. For more information, type the following command: get-help about_commonparametersSwitchParameterSwitchParameter WhatIfDisplays a message that describes the effect of the command instead of executing the command. For more information, type the following command: get-help about_commonparametersSwitchParameterSwitchParameter The Update-SPSecureStoreCredentialMapping cmdlet sets a new credential mapping for a Secure Store Service application.------------------EXAMPLE------------------ C:\PS>$ssApp = Get-SPSecureStoreApplication -ServiceContext http://contoso -Name "ContosoTargetApplication" $firstCredential = ConvertTo-SecureString "LOBDATABASE\jdoe" -AsPlainText -Force $secondCredential = ConvertTo-SecureString "abcDEF123$%^" -AsPlainText -Force $credentialValues = $firstCredential,$secondCredential $userClaim = New-SPClaimsObject -User "CONTOSO\janedoe" -Type WindowsSamAccountName Update-SPSecureStoreCredentialMapping -Identity $ssApp -Values $credentialValues -Principal $userClaimThis example updates a credential mapping for the given site and the target application ContosoTargetApplication, for the user with the identity janedoe on domain CONTOSO. This user is mapped to a pair of credential values on the External System with a username of identity jdoe on domain LOBDATABASE and password abcDEF123$%^.Clear-SPSecureStoreCredentialMappingUpdate-SPSecureStoreGroupCredentialMapping Update-SPSecureStoreCredentialMapping Update-SPSecureStoreApplicationServerKeySynchronizes the key on a Microsoft SharePoint server with the Secure Store master key.UpdateSPSecureStoreApplicationServerKeyUpdate-SPSecureStoreApplicationServerKeyPassphraseStringServiceApplicationProxySPServiceApplicationProxyPipeBindAssignmentCollectionSPAssignmentCollectionPassphraseSpecifies the passphrase that is used for the Secure Store service database.StringString ServiceApplicationProxySpecifies the proxy of the service application that contains the server key to synchronize.SPServiceApplicationProxyPipeBindSPServiceApplicationProxyPipeBind AssignmentCollectionManages objects for the purpose of proper disposal. Use of objects, such as SPWeb or SPSite, can use large amounts of memory and use of these objects in Windows PowerShell scripts requires proper memory management. Using the SPAssignment object, you can assign objects to a variable and dispose of the objects after they are needed to free up memory. When SPWeb, SPSite, or SPSiteAdministration objects are used, the objects are automatically disposed of if an assignment collection or the Global parameter is not used.When the Global parameter is used, all objects are contained in the global store. If objects are not immediately used, or disposed of by using the Stop-SPAssignment command, an out-of-memory scenario can occur.SPAssignmentCollectionSPAssignmentCollection The Update-SPSecureStoreApplicationServerKey cmdlet synchronizes the key on a SharePoint server with the master key for the Secure Store service database.Updating a server key is required when:bulletA new SharePoint server that will run a Secure Store service instance is joined to the farm.The key stored in the server is not the key required for the current Secure Store service database (because of server or networking issues).The master key is updated but during propagation of the new key, this process fails on one or more of the servers.------------------EXAMPLE------------------ C:\PS>$newPassPhrase = "abcDEF123!" Update-SPSecureStoreApplicationServerKey -ServiceApplicationProxy $contosoProxy -Passphrase $newPassPhraseThis example synchronizes the passphrase of the server key on a SharePoint server with the master key for the Secure Store service database.Update-SPSecureStoreMasterKey Update-SPSecureStoreApplicationServerKey New-SPSecureStoreServiceApplicationProxyCreates a new Secure Store Service application proxy in the farm.NewSPSecureStoreServiceApplicationProxyNew-SPSecureStoreServiceApplicationProxyUriUriAssignmentCollectionSPAssignmentCollectionConfirmSwitchParameterDefaultProxyGroupSwitchParameterNameStringWhatIfSwitchParameterNew-SPSecureStoreServiceApplicationProxyServiceApplicationSPServiceApplicationPipeBindAssignmentCollectionSPAssignmentCollectionConfirmSwitchParameterDefaultProxyGroupSwitchParameterNameStringWhatIfSwitchParameterServiceApplicationSpecifies the local Secure Store Service application associated with the new proxy.SPServiceApplicationPipeBindSPServiceApplicationPipeBind UriSpecifies the URI of a remote Secure Store Service application associated with the new proxy.The type must be a valid URI, in the form file:\\server_name\sitedocs.UriUri AssignmentCollectionManages objects for the purpose of proper disposal. Use of objects, such as SPWeb or SPSite, can use large amounts of memory and use of these objects in Windows PowerShell scripts requires proper memory management. Using the SPAssignment object, you can assign objects to a variable and dispose of the objects after they are needed to free up memory. When SPWeb, SPSite, or SPSiteAdministration objects are used, the objects are automatically disposed of if an assignment collection or the Global parameter is not used.When the Global parameter is used, all objects are contained in the global store. If objects are not immediately used, or disposed of by using the Stop-SPAssignment command, an out-of-memory scenario can occur.SPAssignmentCollectionSPAssignmentCollection ConfirmPrompts you for confirmation before executing the command. For more information, type the following command: get-help about_commonparametersSwitchParameterSwitchParameter DefaultProxyGroupSpecifies that the service application proxy be added to the farm's default proxy group.SwitchParameterSwitchParameter NameSpecifies the name of the new service application proxy to create.StringString WhatIfDisplays a message that describes the effect of the command instead of executing the command. For more information, type the following command: get-help about_commonparametersSwitchParameterSwitchParameter The New-SPSecureStoreServiceApplicationProxy cmdlet creates a new Secure Store Service application proxy for a Secure Store Service application in the farm.------------------EXAMPLE------------------ C:\PS>New-SPSecureStoreServiceApplicationProxy -Name "Contoso Service Application Proxy" -ServiceApplication $SSServiceAppThis example creates a new Secure Store Service application proxy with the name Contoso Service Application Proxy for the given service application.New-SPSecureStoreServiceApplicationSet-SPSecureStoreServiceApplication New-SPSecureStoreServiceApplicationProxy Remove-SPSecureStoreApplicationDeletes a Secure Store application.RemoveSPSecureStoreApplicationRemove-SPSecureStoreApplicationIdentitySPSecureStoreApplicationAssignmentCollectionSPAssignmentCollectionConfirmSwitchParameterWhatIfSwitchParameterIdentitySpecifies the Secure Store application to delete.SPSecureStoreApplicationSPSecureStoreApplication AssignmentCollectionManages objects for the purpose of proper disposal. Use of objects, such as SPWeb or SPSite, can use large amounts of memory and use of these objects in Windows PowerShell scripts requires proper memory management. Using the SPAssignment object, you can assign objects to a variable and dispose of the objects after they are needed to free up memory. When SPWeb, SPSite, or SPSiteAdministration objects are used, the objects are automatically disposed of if an assignment collection or the Global parameter is not used.When the Global parameter is used, all objects are contained in the global store. If objects are not immediately used, or disposed of by using the Stop-SPAssignment command, an out-of-memory scenario can occur.SPAssignmentCollectionSPAssignmentCollection ConfirmPrompts you for confirmation before executing the command. For more information, type the following command: get-help about_commonparametersSwitchParameterSwitchParameter WhatIfDisplays a message that describes the effect of the command instead of executing the command. For more information, type the following command: get-help about_commonparametersSwitchParameterSwitchParameter The Remove-SPSecureStoreApplication cmdlet deletes a Secure Store application.------------------EXAMPLE------------------ C:\PS>Get-SPSecureStoreApplication -ServiceContext http://contoso -Name "ContosoTargetApp" | Remove -SPSecureStoreApplicationThis example removes the specified application and target.Get-SPSecureStoreApplicationNew-SPSecureStoreApplicationSet-SPSecureStoreApplication Remove-SPSecureStoreApplication Set-SPSecureStoreServiceApplicationSets properties of a Secure Store Service application in the farm.SetSPSecureStoreServiceApplicationSet-SPSecureStoreServiceApplicationIdentitySPServiceApplicationPipeBindApplicationPoolSPIisWebServiceApplicationPoolAssignmentCollectionSPAssignmentCollectionAuditingEnabledSwitchParameterAuditlogMaxSizeNullableConfirmSwitchParameterDatabaseCredentialsPSCredentialDatabaseNameStringDatabasePasswordSecureStringDatabaseServerStringDatabaseUsernameStringFailoverDatabaseServerStringSharingSwitchParameterWhatIfSwitchParameterIdentitySpecifies the service application to update.SPServiceApplicationPipeBindSPServiceApplicationPipeBind ApplicationPoolSpecifies the existing IIS application pool to run the Web service in for the new service application.SPIisWebServiceApplicationPoolSPIisWebServiceApplicationPool AssignmentCollectionManages objects for the purpose of proper disposal. Use of objects, such as SPWeb or SPSite, can use large amounts of memory and use of these objects in Windows PowerShell scripts requires proper memory management. Using the SPAssignment object, you can assign objects to a variable and dispose of the objects after they are needed to free up memory. When SPWeb, SPSite, or SPSiteAdministration objects are used, the objects are automatically disposed of if an assignment collection or the Global parameter is not used.When the Global parameter is used, all objects are contained in the global store. If objects are not immediately used, or disposed of by using the Stop-SPAssignment command, an out-of-memory scenario can occur.SPAssignmentCollectionSPAssignmentCollection AuditingEnabledTurns on auditing for the Secure Store Service.SwitchParameterSwitchParameter AuditlogMaxSizeSpecifies the number of days to retain the audit log.The type must be a valid integer.NullableNullable ConfirmPrompts you for confirmation before executing the command. For more information, type the following command: get-help about_commonparametersSwitchParameterSwitchParameter DatabaseCredentialsSpecifies the PSCredential object that contains the user name and password to be used for database SQL authentication.PSCredentialPSCredential DatabaseNameSpecifies the name of the Secure Store service database.StringString DatabasePasswordSpecifies the password for the user specified in DatabaseUserName. Use this parameter only if SQL authentication is used to access the metadata service application database.SecureStringSecureString DatabaseServerSpecifies the name of the host server for the database specified in DatabaseName.StringString DatabaseUsernameSpecifies the user name to use for connecting to the database for the Secure Store service application. Use this parameter only if SQL authentication is used to access the service application database.StringString FailoverDatabaseServerSpecifies the name of the host server for the failover database server.StringString SharingSpecifies that the Secure Store Service application is published and shared across the farm.SwitchParameterSwitchParameter WhatIfDisplays a message that describes the effect of the command instead of executing the command. For more information, type the following command: get-help about_commonparametersSwitchParameterSwitchParameter The Set-SPSecureStoreServiceApplication cmdlet sets properties of a Secure Store Service application in the farm.------------------EXAMPLE------------------ C:\PS>Set-SPSecureStoreServiceApplication -Identity $contosoServApp -AuditlogMaxSize 40This example sets the maximum size of the audit log to 40 days for the given service application.New-SPSecureStoreServiceApplicationNew-SPSecureStoreServiceApplicationProxy Set-SPSecureStoreServiceApplication New-SPSecureStoreApplicationCreates a new Secure Store application.NewSPSecureStoreApplicationNew-SPSecureStoreApplicationFieldsTargetApplicationField[]ServiceContextSPServiceContextPipeBindTargetApplicationTargetApplicationAdministratorSPClaim[]AssignmentCollectionSPAssignmentCollectionCredentialsOwnerGroupSPClaim[]TicketRedeemerSPClaim[]ServiceContextSpecifies the service context for the target application.SPServiceContextPipeBindSPServiceContextPipeBind TargetApplicationSpecifies information about the target application. For example, the TargetApplication object includes data values for application name, display name, contact info, enable ticketing flag, and URL address to set the credential. The schema for the TargetApplication object is defined in the ISecureSToreProviderExtended interface that exposes the target application metadata.TargetApplicationTargetApplication AdministratorSpecifies the administrator of the new Secure Store application.SPClaim[]SPClaim[] AssignmentCollectionManages objects for the purpose of proper disposal. Use of objects, such as SPWeb or SPSite, can use large amounts of memory and use of these objects in Windows PowerShell scripts requires proper memory management. Using the SPAssignment object, you can assign objects to a variable and dispose of the objects after they are needed to free up memory. When SPWeb, SPSite, or SPSiteAdministration objects are used, the objects are automatically disposed of if an assignment collection or the Global parameter is not used.When the Global parameter is used, all objects are contained in the global store. If objects are not immediately used, or disposed of by using the Stop-SPAssignment command, an out-of-memory scenario can occur.SPAssignmentCollectionSPAssignmentCollection CredentialsOwnerGroupSpecifies the claims object for the groups that own the group credentials.SPClaim[]SPClaim[] FieldsSpecifies the field information for the application. The default fields are username and password.TargetApplicationField[]TargetApplicationField[] TicketRedeemerSpecifies the ticket redeemer claim value.SPClaim[]SPClaim[] The New-SPSecureStoreApplication cmdlet creates a new Secure Store application.------------------EXAMPLE------------------ C:\PS>$usernameField = New-SPSecureStoreApplicationField -Name "UserName" -Type WindowsUserName -Masked:$false $passwordField = New-SPSecureStoreApplicationField -Name "Password" -Type WindowsPassword -Masked:$true $fields = $usernameField,$passwordField $userClaim = New-SPClaimsObject -User "CONTOSO\janedoe" -Type WindowsSamAccountName $contosoTargetApp = New-SPSecureStoreTargetApplication -Name "ContosoTargetApplication" -FriendlyName "Contoso Target Application" -ApplicationType Group New-SPSecureStoreApplication -ServiceContext http://contoso -TargetApplication $contosoTargetApp -Fields $fields -Administrator $claimUserThis example creates a new group target application ContosoTargetApplication, and then a new application for that target application. This new application has two fields; UserName of type WindowsUserName, and Password of type WindowsPassword. The user with identity janedoe on the CONTOSO domain is set as the target application administrator.Get-SPSecureStoreApplicationSet-SPSecureStoreApplicationRemove-SPSecureStoreApplication New-SPSecureStoreApplication Update-SPSecureStoreMasterKeyChanges the master key of a Secure Store Service application.UpdateSPSecureStoreMasterKeyUpdate-SPSecureStoreMasterKeyPassphraseStringServiceApplicationProxySPServiceApplicationProxyPipeBindAssignmentCollectionSPAssignmentCollectionPassphraseSpecifies the passphrase that is used for the Secure Store database. The passphrase that you enter is not stored. Make sure that you write down the passphrase and store it in a secure location. The passphrase will be required to add new Secure Store service servers.StringString ServiceApplicationProxySpecifies the proxy of the Secure Store service application that contains the master key to update.SPServiceApplicationProxyPipeBindSPServiceApplicationProxyPipeBind AssignmentCollectionManages objects for the purpose of proper disposal. Use of objects, such as SPWeb or SPSite, can use large amounts of memory and use of these objects in Windows PowerShell scripts requires proper memory management. Using the SPAssignment object, you can assign objects to a variable and dispose of the objects after they are needed to free up memory. When SPWeb, SPSite, or SPSiteAdministration objects are used, the objects are automatically disposed of if an assignment collection or the Global parameter is not used.When the Global parameter is used, all objects are contained in the global store. If objects are not immediately used, or disposed of by using the Stop-SPAssignment command, an out-of-memory scenario can occur.SPAssignmentCollectionSPAssignmentCollection ReencryptSpecifies that the database for the Secure Store service application is re-encrypted. This synchronizes the master key in all servers that run an instance of the Secure Store application.The Update-SPSecureStoreApplicationServerKey cmdlet changes the master key of a Secure Store Service application.Updating the master key is required when:bulletA new instance of a service application is created and the database for the Secure Store service application is new or empty.The master key or passphrase has been compromised.Security guidelines require that the passphrase or key be replaced.------------------EXAMPLE------------------ C:\PS>$newPassPhrase = "abcDEF123!" Update-SPSecureStoreMasterKey -ServiceApplicationProxy $contosoProxy -Passphrase $newPassPhraseThis example creates a new master key for the given service application.Update-SPSecureStoreApplicationServerKey Update-SPSecureStoreMasterKey Set-SPSecureStoreApplicationSets properties of a Secure Store application.SetSPSecureStoreApplicationSet-SPSecureStoreApplicationIdentitySPSecureStoreApplicationAdministratorSPClaim[]AssignmentCollectionSPAssignmentCollectionConfirmSwitchParameterCredentialsOwnerGroupSPClaim[]FieldsTargetApplicationField[]TargetApplicationTargetApplicationTicketRedeemerSPClaim[]WhatIfSwitchParameterIdentitySpecifies the Secure Store application to update.SPSecureStoreApplicationSPSecureStoreApplication AdministratorSpecifies the administrator of the Secure Store application.SPClaim[]SPClaim[] AssignmentCollectionManages objects for the purpose of proper disposal. Use of objects, such as SPWeb or SPSite, can use large amounts of memory and use of these objects in Windows PowerShell scripts requires proper memory management. Using the SPAssignment object, you can assign objects to a variable and dispose of the objects after they are needed to free up memory. When SPWeb, SPSite, or SPSiteAdministration objects are used, the objects are automatically disposed of if an assignment collection or the Global parameter is not used.When the Global parameter is used, all objects are contained in the global store. If objects are not immediately used, or disposed of by using the Stop-SPAssignment command, an out-of-memory scenario can occur.SPAssignmentCollectionSPAssignmentCollection ConfirmPrompts you for confirmation before executing the command. For more information, type the following command: get-help about_commonparametersSwitchParameterSwitchParameter CredentialsOwnerGroupSpecifies the claims object for the groups that own the group credentials.SPClaim[]SPClaim[] FieldsSpecifies the field information for the application. The default fields are username and password.TargetApplicationField[]TargetApplicationField[] TargetApplicationSpecifies the target application.TargetApplicationTargetApplication TicketRedeemerSpecifies the ticket redeemer claim value.SPClaim[]SPClaim[] WhatIfDisplays a message that describes the effect of the command instead of executing the command. For more information, type the following command: get-help about_commonparametersSwitchParameterSwitchParameter The Set-SPSecureStoreApplication cmdlet sets properties of a Secure Store application.------------------EXAMPLE------------------ C:\PS>$targetApp.FriendlyName = "Updated Contoso Target App" Set-SPSecureStoreApplication -Identity $application -TargetApplication $targetAppThis example sets a new display name Updated Contoso Target App for the target application.Get-SPSecureStoreApplicationNew-SPSecureStoreApplicationRemove-SPSecureStoreApplication Set-SPSecureStoreApplication Disable-SPSingleSignOnDisables the single sign-on (SSO) Service on a farm server.DisableSPSingleSignOnDisable-SPSingleSignOnServerNameStringAssignmentCollectionSPAssignmentCollectionConfirmSwitchParameterWhatIfSwitchParameterServerNameSpecifies the name of the server in which the service is running.StringString AssignmentCollectionManages objects for the purpose of proper disposal. Use of objects, such as SPWeb or SPSite, can use large amounts of memory and use of these objects in Windows PowerShell scripts requires proper memory management. Using the SPAssignment object, you can assign objects to a variable and dispose of the objects after they are needed to free up memory. When SPWeb, SPSite, or SPSiteAdministration objects are used, the objects are automatically disposed of if an assignment collection or the Global parameter is not used.When the Global parameter is used, all objects are contained in the global store. If objects are not immediately used, or disposed of by using the Stop-SPAssignment command, an out-of-memory scenario can occur.SPAssignmentCollectionSPAssignmentCollection ConfirmPrompts you for confirmation before executing the command. For more information, type the following command: get-help about_commonparametersSwitchParameterSwitchParameter WhatIfDisplays a message that describes the effect of the command instead of executing the command. For more information, type the following command: get-help about_commonparametersSwitchParameterSwitchParameter Use the Disable-SPSingleSignOn cmdlet to disable the SSO Service on a farm server.------------------EXAMPLE------------------ C:\PS>Disable-SPSingleSignOn myOldSSO -ServerName CONTOSOThis example turns off the SSO Service on the server named CONTOSO.Upgrade-SPSingleSignOnDatabase Disable-SPSingleSignOn Upgrade-SPSingleSignOnDatabaseMigrates the application definitions from Single Sign-On (SSO) database to Secure Store database as target applications.UpgradeSPSingleSignOnDatabaseUpgrade-SPSingleSignOnDatabaseSecureStoreConnectionStringStringSecureStorePassphraseSecureStringSSOConnectionStringStringAssignmentCollectionSPAssignmentCollectionSecureStoreConnectionStringSpecifies the SQL Server connection string for the Secure Store database.StringString SecureStorePassphraseSpecifies the passphrase used for the Secure Store database.SecureStringSecureString SSOConnectionStringSpecifies the SQL Server connection string for the SSO database.StringString AssignmentCollectionManages objects for the purpose of proper disposal. Use of objects, such as SPWeb or SPSite, can use large amounts of memory and use of these objects in Windows PowerShell scripts requires proper memory management. Using the SPAssignment object, you can assign objects to a variable and dispose of the objects after they are needed to free up memory. When SPWeb, SPSite, or SPSiteAdministration objects are used, the objects are automatically disposed of if an assignment collection or the Global parameter is not used.When the Global parameter is used, all objects are contained in the global store. If objects are not immediately used, or disposed of by using the Stop-SPAssignment command, an out-of-memory scenario can occur.SPAssignmentCollectionSPAssignmentCollection The Upgrade-SPSingleSignOnDatabase cmdlet migrates the application definitions from SSO database to Secure Store database as target applications. Use the Upgrade-SPSingleSignOn cmdlet to convert an SSO database to a Secure Store database. SSO is a Microsoft SharePoint Server feature. SSO functionality is performed by the Secure Store Service in Microsoft SharePoint Server 2010.------------------EXAMPLE------------------ C:\PS>Upgrade-SPSingleSignOnDatabase -SSOConnectionString "Data Source=oldServer;Database=SSO;Trusted_Connection=yes;" -SecureStoreConnectionString "Data Source=CONTOSO\SQLDatabase;Database=ContosoSSDatabase;Trusted_Connection=yes;" -SecureStorePassphrase "abcDEF123!@#"This example migrates the SSO database at the SSO connection to a Secure Store database at the Secure Store connection.Disable-SPSingleSignOn Upgrade-SPSingleSignOnDatabase Set-SPSecureStoreDefaultProviderUpdates the secure store provider.SetSPSecureStoreDefaultProviderSet-SPSecureStoreDefaultProviderTypeTypeAssignmentCollectionSPAssignmentCollectionTypeSpecifies the provider type. The type must be loaded in memory.The type must be a secure store provider type enclosed in square brackets; for example, [Reflection.Assembly].TypeType AssignmentCollectionManages objects for the purpose of proper disposal. Use of objects, such as SPWeb or SPSite, can use large amounts of memory and use of these objects in Windows PowerShell scripts requires proper memory management. Using the SPAssignment object, you can assign objects to a variable and dispose of the objects after they are needed to free up memory. When SPWeb, SPSite, or SPSiteAdministration objects are used, the objects are automatically disposed of if an assignment collection or the Global parameter is not used.When the Global parameter is used, all objects are contained in the global store. If objects are not immediately used, or disposed of by using the Stop-SPAssignment command, an out-of-memory scenario can occur.SPAssignmentCollectionSPAssignmentCollection The Set-SPSecureStoreDefaultProvider cmdlet sets or replaces the secure store provider. To register a third-party secure store, implement the ISecureStoreProvider interface. With the interface defined, place the DLL file in the global assembly cache, and then load the DLL and load the type, as shown in the example. You can then set the secure store provider.------------------EXAMPLE------------------ C:\PS>[Reflection.Assembly]::LoadFrom("C:\ContosoFolder\contosoSecureStore.dll") $type = [Contoso.SecureStore.ContosoSecureStoreProvider]This example sets the custom implemented secure store provider. Set-SPSecureStoreDefaultProvider New-SPSecureStoreServiceApplicationCreates a new Secure Store Service application in the farm.NewSPSecureStoreServiceApplicationNew-SPSecureStoreServiceApplicationApplicationPoolSPIisWebServiceApplicationPoolPipeBindAuditingEnabledSwitchParameterAssignmentCollectionSPAssignmentCollectionAuditlogMaxSizeNullableConfirmSwitchParameterDatabaseCredentialsPSCredentialDatabaseNameStringDatabasePasswordSecureStringDatabaseServerStringDatabaseUsernameStringFailoverDatabaseServerStringNameStringPartitionModeSwitchParameterSharingSwitchParameterWhatIfSwitchParameterApplicationPoolSpecifies the existing IIS application pool to run the Web service in for the new service application.SPIisWebServiceApplicationPoolPipeBindSPIisWebServiceApplicationPoolPipeBind AuditingEnabledTurns on auditing for the Secure Store Service.SwitchParameterSwitchParameter NameSpecifies the name of the new Secure Store Service application.StringString AssignmentCollectionManages objects for the purpose of proper disposal. Use of objects, such as SPWeb or SPSite, can use large amounts of memory and use of these objects in Windows PowerShell scripts requires proper memory management. Using the SPAssignment object, you can assign objects to a variable and dispose of the objects after they are needed to free up memory. When SPWeb, SPSite, or SPSiteAdministration objects are used, the objects are automatically disposed of if an assignment collection or the Global parameter is not used.When the Global parameter is used, all objects are contained in the global store. If objects are not immediately used, or disposed of by using the Stop-SPAssignment command, an out-of-memory scenario can occur.SPAssignmentCollectionSPAssignmentCollection AuditlogMaxSizeSpecifies the number of days to retain the audit log.The type must be a valid integer.NullableNullable ConfirmPrompts you for confirmation before executing the command. For more information, type the following command: get-help about_commonparametersSwitchParameterSwitchParameter DatabaseCredentialsSpecifies the PSCredential object that contains the user name and password to be used for database SQL authentication.PSCredentialPSCredential DatabaseNameSpecifies the name of the Secure Store service database.StringString DatabasePasswordSpecifies the password for the user specified in DatabaseUserName. Use this parameter only if SQL authentication is used to access the metadata service application database.SecureStringSecureString DatabaseServerSpecifies the name of the host server for the database specified in DatabaseName.StringString DatabaseUsernameSpecifies the user name to use for connecting to the database for the Secure Store service application. Use this parameter only if SQL authentication is used to access the service application database.StringString FailoverDatabaseServerSpecifies the name of the host server for the failover database server.StringString PartitionModeSpecifies that the service application restricts data by subscription ID. This property cannot be changed after the service application is created.SwitchParameterSwitchParameter SharingSpecifies that the Secure Store service application is published and shared across the farm.SwitchParameterSwitchParameter WhatIfDisplays a message that describes the effect of the command instead of executing the command. For more information, type the following command: get-help about_commonparametersSwitchParameterSwitchParameter The New-SPSecureStoreServiceApplication cmdlet creates a new Secure Store Service application in the farm.------------------EXAMPLE------------------ C:\PS>New-SPSecureStoreServiceApplication -ApplicationPool "SharePoint Web Services Default" -AuditingEnabled:$false -DatabaseServer "CONTOSO\SharePoint" -DatabaseName "ContosoSSDatabase"-Name "Contoso Secure Store"This example creates a new Secure Store Service application with the name Contoso Secure Store with auditing disabled, and creates a database with the name ContosoSSDatabase on the given database server for use with the service application.Set-SPSecureStoreServiceApplicationNew-SPSecureStoreServiceApplicationProxy New-SPSecureStoreServiceApplication Clear-SPSecureStoreCredentialMappingDeletes a credential mapping from a Secure Store Service application.ClearSPSecureStoreCredentialMappingClear-SPSecureStoreCredentialMappingIdentitySPSecureStoreApplicationPrincipalSPClaimAssignmentCollectionSPAssignmentCollectionConfirmSwitchParameterWhatIfSwitchParameterClear-SPSecureStoreCredentialMappingAllSwitchParameterPrincipalSPClaimServiceContextSPServiceContextPipeBindAssignmentCollectionSPAssignmentCollectionConfirmSwitchParameterWhatIfSwitchParameterAllSpecifies that the principal is deleted from all Secure Store applications.SwitchParameterSwitchParameter IdentitySpecifies the Secure Store application (that contains the principal) from which to delete the credential mapping.SPSecureStoreApplicationSPSecureStoreApplication PrincipalSpecifies the SPClaims object that contains the principal.SPClaimSPClaim ServiceContextSpecifies the service context for which the credential mapping will be deleted.SPServiceContextPipeBindSPServiceContextPipeBind AssignmentCollectionManages objects for the purpose of proper disposal. Use of objects, such as SPWeb or SPSite, can use large amounts of memory and use of these objects in Windows PowerShell scripts requires proper memory management. Using the SPAssignment object, you can assign objects to a variable and dispose of the objects after they are needed to free up memory. When SPWeb, SPSite, or SPSiteAdministration objects are used, the objects are automatically disposed of if an assignment collection or the Global parameter is not used.When the Global parameter is used, all objects are contained in the global store. If objects are not immediately used, or disposed of by using the Stop-SPAssignment command, an out-of-memory scenario can occur.SPAssignmentCollectionSPAssignmentCollection ConfirmPrompts you for confirmation before executing the command. For more information, type the following command: get-help about_commonparametersSwitchParameterSwitchParameter WhatIfDisplays a message that describes the effect of the command instead of executing the command. For more information, type the following command: get-help about_commonparametersSwitchParameterSwitchParameter The Clear-SPSecureStoreCredentialMapping cmdlet deletes a credential mapping from a Secure Store application.------------------EXAMPLE------------------ C:\PS>$ssApp = Get-SPSecureStoreApplication -ServiceContext http://contoso -Name "ContosoTargetApplication" $userClaim = New-SPClaimsObject -User "CONTOSO\johndoe" -Type WindowsSamAccountName Clear-SPSecureStoreCredentialMapping -Identity $ssApp -Principal $userClaimThis example deletes the credential mapping from the target application ContosoTargetApplication for the user with alias johndoe and domain CONTOSO.Update-SPSecureStoreCredentialMapping Clear-SPSecureStoreCredentialMapping Update-SPSecureStoreGroupCredentialMappingSets a new group credential mapping for a Secure Store Service application.UpdateSPSecureStoreGroupCredentialMappingUpdate-SPSecureStoreGroupCredentialMappingIdentitySPSecureStoreApplicationValuesSecureString[]AssignmentCollectionSPAssignmentCollectionConfirmSwitchParameterWhatIfSwitchParameterIdentitySpecifies the Secure Store application (that contains the principal) from which to delete the credential mapping.SPSecureStoreApplicationSPSecureStoreApplication ValuesSpecifies the field values for the credential mapping.SecureString[]SecureString[] AssignmentCollectionManages objects for the purpose of proper disposal. Use of objects, such as SPWeb or SPSite, can use large amounts of memory and use of these objects in Windows PowerShell scripts requires proper memory management. Using the SPAssignment object, you can assign objects to a variable and dispose of the objects after they are needed to free up memory. When SPWeb, SPSite, or SPSiteAdministration objects are used, the objects are automatically disposed of if an assignment collection or the Global parameter is not used.When the Global parameter is used, all objects are contained in the global store. If objects are not immediately used, or disposed of by using the Stop-SPAssignment command, an out-of-memory scenario can occur.SPAssignmentCollectionSPAssignmentCollection ConfirmPrompts you for confirmation before executing the command. For more information, type the following command: get-help about_commonparametersSwitchParameterSwitchParameter WhatIfSwitchParameterSwitchParameter The Update-SPSecureStoreGroupCredentialMapping cmdlet sets a new group credential mapping for a Secure Store Service application. Group credentials are a set of credentials that are associated with multiple identities. Target applications will get credentials for a Secure Store application by using the current user. If the current user meets the authorization rule defined in the Secure Store application for the group credentials, then the data is provided.------------------EXAMPLE------------------ C:\PS>$ssApp = Get-SPSecureStoreApplication -ServiceContext http://contoso -Name "ContosoGroupTargetApplication" $firstCredential = ConvertTo-SecureString "LOBDATABASE\fulltimeemployees" -AsPlainText -Force $secondCredential = ConvertTo-SecureString "abcDEF123$%^" -AsPlainText -Force $credentialValues = $firstCredential,$secondCredential Update-SPSecureStoreGroupCredentialMapping -Identity $ssApp -Values $credentialValuesThis example adds a credential mapping for the target application ContosoGroupTargetApplication, for all users in this group target application. These users are mapped to a pair of credential values on the External System with a username of identity fulltimeemployees on domain LOBDATABASE and with password abcDEF123$%^.Update-SPSecureStoreCredentialMappingClear-SPSecureStoreCredentialMapping Update-SPSecureStoreGroupCredentialMapping Clear-SPSecureStoreDefaultProviderClears the secure store provider.ClearSPSecureStoreDefaultProviderClear-SPSecureStoreDefaultProviderAssignmentCollectionSPAssignmentCollectionAssignmentCollectionManages objects for the purpose of proper disposal. Use of objects, such as SPWeb or SPSite, can use large amounts of memory and use of these objects in Windows PowerShell scripts requires proper memory management. Using the SPAssignment object, you can assign objects to a variable and dispose of the objects after they are needed to free up memory. When SPWeb, SPSite, or SPSiteAdministration objects are used, the objects are automatically disposed of if an assignment collection or the Global parameter is not used.When the Global parameter is used, all objects are contained in the global store. If objects are not immediately used, or disposed of by using the Stop-SPAssignment command, an out-of-memory scenario can occur.SPAssignmentCollectionSPAssignmentCollection The Clear-SPSecureStoreDefaultProvider cmdlet clears the secure store provider.------------------EXAMPLE------------------ C:\PS>Clear-SPSecureStoreDefaultProviderThis example clears the secure store provider.Set-SPSecureStoreDefaultProvider Clear-SPSecureStoreDefaultProvider