The behavior of the Get-FederationInformation cmdlet in Exchange Online is being updated to enhance security by limiting the scope of domain data returned. This change will take effect in June 2025 and may impact scripts or tools that rely on retrieving all federated domains by default.
To enhance security and reduce potential data exposure, we are updating the behavior of the Get-FederationInformation cmdlet in Exchange Online. This change limits the scope of domain data returned by the cmdlet.
When this will happen:
General Availability (Worldwide, GCC, GCC-High, DoD): Rollout will begin in mid-June 2025 and is expected to complete by late June 2025.
How this affects your organization:
Previously, the Get-FederationInformation cmdlet returned all federated domain information in the DomainNames field. After this update, the cmdlet will only return domain information that is explicitly passed as a parameter. This change may impact scripts or tools that rely on retrieving all federated domains by default.
There is no change to the cmdlet’s availability or core functionality—only the scope of data returned is affected.
What you can do to prepare:
Get-FederationInformation cmdlet to ensure they explicitly pass the required domain(s) as parameters.