You are missing the TargetName or TargetIdentifier parameter (which are defined as required for the particular parameter set you are using). That's what "PositionalParameterNotFound" means.
I've never used this particular set of commands before, but I tend to do something like this: Get-ADFSRelyingPartyTrust -identifier "urn:party:sso" | Set-ADFSRelyingPartyTrust -NotBeforeSkew 2 So that the entire object gets passed to the child cmdlet. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: David Lum [mailto:[email protected]] Sent: Thursday, February 02, 2012 3:03 PM To: NT System Admin Issues Subject: PowerShell and ADFS Root issue: My SAML\ADFS implementation works beautifully - most of the time. On occasion we get "The SAML document specified an invalid time based on the NotBefore and NotAfter values and the Concur server time." Cause: The timestamp on the SAML document submitted is before the timestamp on the receiving end. Solution: Configure ADFS to allow some skew in the timestamp http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/f42d4f48-8169-4f38-866f-c0da11702a0d Specifically run this PS command: Set-ADFSRelyingPartyTrust -identifier "urn:party:sso" -NotBeforeSkew 2 I get this message: + Set-ADFSRelyingPartyTrust <<<< -identifier "urn:party:sso" NotBeforeSkew 2 + CategoryInfo : InvalidArgument: (:) [Set-ADFSRelyingPartyTrust], ParameterBindingException + FullyQualifiedErrorId : PositionalParameterNotFound,Microsoft.IdentityServer.PowerShell.Commands.SetRelyingParty TrustCommand Character 26 is the first space after the last "t" in trust. If I change the command to "Get" just to see settings, it works fine Get-ADFSRelyingPartyTrust -identifier "urn:party:sso" All I do is edit that line so Get = Set and then add the NotBeforeSkew line and I get the error. Bizarre-o. Anyone? David Lum Systems Engineer // NWEATM Office 503.548.5229 // Cell (voice/text) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
