Published May 23, 2025
To enhance security, the `Get-FederationInformation` cmdlet in Exchange Online will now only return domain information explicitly passed as a parameter. This update, affecting scripts and tools, will roll out from late June 2025 to late August 2025. Review and update any automation accordingly. More details are available in the official blog post.
Updated July 17, 2025: We have updated the timeline. Thank you for your patience.
To enhance security and reduce potential data exposure, we are updating the behavior of the Get-FederationInformation cmdlet in Exchange Online. This change limits the scope of domain data returned by the cmdlet.
When this will happen:
General Availability (Worldwide, GCC, GCC-High, DoD): Rollout will begin in late June 2025 (previously mid-June) and is expected to complete by late August 2025 (previously early July).
How this affects your organization:
Previously, the Get-FederationInformation cmdlet returned all federated domain information in the DomainNames field. After this update, the cmdlet will only return domain information that is explicitly passed as a parameter. This change may impact scripts or tools that rely on retrieving all federated domains by default.
There is no change to the cmdlet’s availability or core functionality—only the scope of data returned is affected.
What you can do to prepare:
Get-FederationInformation cmdlet to ensure they explicitly pass the required domain(s) as parameters.