Powershell to set a Web Application's Trusted Identity Provider to an STS and NTLM?

Question

I've created a custom STS and have setup trust with SharePoint via New-SPTrustedIdentityTokenIssuer. I can use Central Admin to configure a Web Application to use both NTLM and the STS, however I can't do that via PowerShell.

Is there a PowerShell command to do that? Set-SPWebApplication has the AuthenticationMethod and AuthenticationProvider parameters, but if I specify both, only AuthenticationProvider is applied, i.e. Windows Authentication is unticked.

Any help greatly appreciated!

Answer 1

In case this helps anyone else (or me in the future) you can do this with:

$winAp = new-SPAuthenticationProvider -UseWindowsIntegratedAuthentication
$stsAp = Get-SPTrustedIdentityTokenIssuer "YourSTS"
Set-SPWebApplication -Identity $webApp -AuthenticationProvider $stsAp, $winAp -Zone "Default"