Windows Azure - http://ignatiuz.com/blogs/

$cert = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2("c:\your_token_signing.cer")

 

$map1 = New-SPClaimTypeMapping "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" -IncomingClaimTypeDisplayName "Email" -SameAsIncoming

 

$realm = "your-realm"

 

$signinurl = "https://your-service-namespace.accesscontrol.appfabriclabs.com/v2/wsfederation"

 

New-SPTrustedIdentityTokenIssuer -Name "Azure ACS" -Description "Windows Azure ACS v2" -Realm $realm -ImportTrustCertificate $cert -ClaimsMappings $map1 -SignInUrl $signinurl -IdentifierClaim $map1.InputClaimType

 

New-SPTrustedRootAuthority -Name "Azure Test Token Signing" -Certificate $cert