Create an Organization Relationship

Article
07/23/2014

Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2

You can create an organization relationship with an external federated Microsoft Exchange Server 2010 organization for the purpose of sharing calendar availability (free/busy) information.

Note

Creating an organization relationship is one of several steps in setting up federated delegation in your Microsoft Exchange Server 2010 organization. To review all the steps, see Configure Federated Delegation.

Looking for other management tasks related to federated delegation? Check out Managing Federated Delegation.

Prerequisites

Before you can create an organization relationship, you must first set up a federation trust with the Exchange Federation Gateway. For more information, see Create a Federation Trust.

What Do You Want to Do?

Use the EMC to create an organization relationship
Use the Shell to create an organization relationship

Use the EMC to create an organization relationship

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Organization relationships" entry in the Mailbox Permissions topic.

In the console tree, click Organization Configuration.
In the action pane, click New Organization Relationship.
On the Introduction page, complete the following fields:
- Name Type a name for the organization relationship.
- Enable this organization relationship Select this check box to enable this organization relationship.
- Enable free/busy information access Select this check box to specify whether this organization relationship should be used for retrieving free/busy information from the external Exchange organization.
- Specify free/busy data access level If you selected the Enable free/busy information access check box, you can select one of the following options from this list to specify what type of free/busy information should be retrieved from the external Exchange organization:
  
  No free/busy access
  
  Free/busy access with time only
  
  Free/busy access with time, plus subject and location
- Specify a security distribution group that indicates what internal users free/busy data is accessible Select this check box if you want to specify a distribution group to list your users who can have their free/busy information accessed by the external Exchange organization. Use the corresponding box to type the SMTP address of a security distribution group within your organization, or click Browse to search for the group.
On the External Organization page, complete the following fields:
- Automatically discover configuration information Click this button to have Exchange locate the configuration information of the external Exchange organization by using Autodiscover.
  
  Specify a federated domain of the external Exchange organization If you clicked Automatically discover configuration information, use this box to specify a federated domain of the external Exchange organization (for example, contoso.com). You can't specify more than one domain. Information about domains federated by the remote organization is published by using the Exchange Autodiscover Web service endpoints.
- Manually enter the configuration information   Click this button if you want to manually provide the configuration information for the external Exchange organization.
  
  Federated domains of the external Exchange organization   Use this box to type the federated domain names of the external Exchange organization. The organization you're establishing an organization relationship with may have more than one federated domain. After you type each name, click Add to add the name to the list of domains.
  
  Edit   Select a federated domain name from the list, and then click Edit to modify the domain name.
  
     Select a federated domain name from the list, and then click this button to remove the domain.
  
  Application URI of the external Exchange organization   Use this box to type the Uniform Resource Identifier (URI) of the external Exchange organization's application server (for example, mail.contoso.com). A URI is a string of characters used to identify or name a resource. In this case, the application URI is used when requesting a delegated token for the external Exchange organization to retrieve free/busy information.
  
  Autodiscover endpoint of the external Exchange organization   Use this box to type the Autodiscover URL of the external Exchange organization's Exchange Web Services (for example, https://contoso.com/autodiscover/autodiscover.svc/wssecurity). Exchange uses the Autodiscover service to automatically detect the correct Client Access server endpoint.
On the New Organization Relationship page, review your configuration settings. Click New to create the organization relationship. Click Back to make changes.
On the Completion page, review the following, and then click Finish to close the wizard:
- A status of Completed indicates that the wizard completed the task successfully.
- A status of Failed indicates that the task wasn't completed. If the task fails, review the summary for an explanation, and then click Back to make any configuration changes.

Use the Shell to create an organization relationship

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Organization relationships" entry in the Mailbox Permissions topic.

This example creates an organization relationship with Contoso, Ltd with the following conditions:

The organization relationship is enabled for contoso.com, northamerica.contoso.com, and europe.contoso.com.
Free/busy access is enabled.
The requesting organization receives free/busy time, subject, and location information from the target organization.

New-OrganizationRelationship -Name "Contoso" -DomainNames "contoso.com","northamerica.contoso.com","europe.contoso.com" -FreeBusyAccessEnabled $true -FreeBusyAccessLevel LimitedDetails

For detailed syntax and parameter information, see New-OrganizationRelationship.

This example attempts to automatically discover configuration information from the external Exchange organization Contoso.com by using the domain names provided in the Get-FederationInformation cmdlet. If you use this method to create your organization relationship, you must first make sure that you've created an organization identifier by using the Set-FederatedOrganizationIdentifier cmdlet.

Get-FederationInformation -DomainName Contoso.com | New-OrganizationRelationship -Name "Contoso" -FreeBusyAccessEnabled $true -FreeBusyAccessLevel -LimitedDetails

For detailed syntax and parameter information, see Get-FederationInformation and New-OrganizationRelationship.

This example creates an organization relationship with Fourth Coffee. In this example, the connection settings with the external Exchange organization are provided. The following conditions apply:

The organization relationship is established by using “fourthcoffee.com” as the domain that has been set up as a federated domain by Fourth Coffee.
If fourthcoffee.com is on Microsoft Exchange Server 2010 Service Pack 1 (SP1), the ApplicationUri property is exchangedelegation.fourthcoffee.com. If fourthcoffee.com is on Microsoft Exchange Server 2010 Service Pack 2 (SP2), the ApplicationUri property is FYDIBOHF25SPDLT.fourthcoffee.com.
The Autodiscover URL is https://mail.fourthcoffee.com/autodiscover/autodiscover.svc/wssecurity.
Free/busy access is enabled.
The requesting organization only receives free/busy information with the time.

In Exchange 2010 SP1, run the following command:

New-OrganizationRelationship -Name "Fourth Coffee" -DomainNames "fourthcoffee.com" -FreeBusyAccessEnabled $true -FreeBusyAccessLevel -AvailabilityOnly -TargetAutodiscoverEpr "https://mail.fourthcoffee.com/autodiscover/autodiscover.svc/wssecurity" -TargetApplicationUri "exchangedelegation.fourthcoffee.com"

In Exchange 2010 SP2, run the following command:

New-OrganizationRelationship -Name "Fourth Coffee" -DomainNames "fourthcoffee.com" -FreeBusyAccessEnabled $true -FreeBusyAccessLevel -AvailabilityOnly -TargetAutodiscoverEpr "https://mail.fourthcoffee.com/autodiscover/autodiscover.svc/wssecurity" -TargetApplicationUri "FYDIBOHF25SPDLT.fourthcoffee.com"