Agent for SharePoint Guide › Configure SharePoint › How to Configure the Trusted Identity Provider › Modify the PowerShell Script

Modify the PowerShell Script

To create a trusted identity provider on your SharePoint central administration server, edit the PowerShell script to include the following information about your SharePoint environment:

• The full path to the root certificate (typically from a third-party Certificate Authority) that signed your certificate.
• Create a trusted root authority in SharePoint for the certificate authority which signed your certificate.
• The full path to your signing certificate.
• Friendly names for each of the claim mappings.
• The SharePoint realm name (to identify the trusted identity provider).

  Note: This value appears in SharePoint Central Administration under the list of available trusted identity providers.

• A friendly description for the trusted identity provider.

The specific modifications to the PowerShell script vary according to the type of certificates you want to use with your CA SiteMinder trusted identity provider. The following scenarios exist:

• You are using a certificate that is signed by an external certificate authority, and the certificate authority is not trusted by your SharePoint server.
• You are using a self-signed certificate and the certificate authority is not trusted by your SharePoint server.
• You are using a certificate, and the certificate authority is trusted by your SharePoint server. Check with your SharePoint administrator to confirm that the proper certificate authority is trusted.

Follow these steps:

1. Use the previous list to determine which scenario applies to your situation.
2. Perform the appropriate procedure from the following list:
   • Modify the PowerShell script for certificates that are signed by an external certificate authority.
   • Modify the PowerShell script for un–trusted self-signed certificates.
   • Modify the PowerShell script for certificates that are issued by a trusted certificate authority.