Hi,<br>sorry for my english. I'm following the guide <strong>Federated Collaboration with Shibboleth 2.0 and SharePoint 2010 Technologies</strong> at the site <a href="http://technet.microsoft.com/en-us/library/adfs2-step-by-step-guides%28WS.10%29.aspx">http://technet.microsoft.com/en-us/library/adfs2-step-by-step-guides%28WS.10%29.aspx</a>. So I have 3 virtual machines (one for ADFS, one for Shibboleth and one for Sharepoint2010). I have configured the shibboleth machine as showed in the guide and the status is ok (the <a href="https://idmgt-ip0.idmgtext.demo:8443/idp/profile/Status">https://idmgt-ip0.idmgtext.demo:8443/idp/profile/Status</a> page shows ok). For the ADFS side, the guide doesn't tell anything and so I have followed other documents on the web. Before configure the Sharepoint side, I have to test if it's all right and so, from the ADFS machine, I visit <a href="https://sts.idmgt.demo/adfs/ls/IdpInitiatedSignon.aspx">https://sts.idmgt.demo/adfs/ls/IdpInitiatedSignon.aspx</a> (sts.idmgt.demo is the ADFS machine'd alias name) from Internet Explorer and gets out the following error message: <br>
<p style="margin:5pt 0in;line-height:normal;font-family:arial,helvetica,sans-serif"><font><span>There was a problem accessing the site. Try to browse to the site again.
</span></font></p><font style="font-family:arial,helvetica,sans-serif" size="2">
</font><p style="margin:5pt 0in;line-height:normal;font-family:arial,helvetica,sans-serif"><font><span>If the problem persists, contact the administrator of this site and provide the reference number to identify the problem. <br>
</span></font></p><p style="margin:5pt 0in;line-height:normal;font-family:times new roman,serif"><font style="font-family:arial,helvetica,sans-serif" size="2"><span id="ctl00_ContentPlaceHolder1_ExceptionMessageLabel">MSIS7012: An error
occurred while processing the request. Contact your administrator for
details.</span></font></p><p style="margin:5pt 0in;line-height:normal;font-family:times new roman,serif"><br><font style="font-family:arial,helvetica,sans-serif" size="2"><span id="ctl00_ContentPlaceHolder1_ExceptionMessageLabel"></span></font></p>
<p style="margin:5pt 0in;line-height:normal;font-family:times new roman,serif"><font style="font-family:arial,helvetica,sans-serif" size="2"><span id="ctl00_ContentPlaceHolder1_ExceptionMessageLabel">In the Event Viewer there is a Warning <br>
</span></font></p><p style="margin:5pt 0in;line-height:normal;font-family:times new roman,serif"><font style="font-family:arial,helvetica,sans-serif" size="2"><span id="ctl00_ContentPlaceHolder1_ExceptionMessageLabel">Trust monitoring service detected changes in policy of 'Shibboleth IdP', but did not automatically apply the changes on the trust partner. <br>
<br>Additional Data <br>Warnings: <br>MSIS7524: A 'ArtifactResolutionService' endpoint was ignored because its binding 'urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding' is not supported.<br>MSIS7524: A 'SamlSingleSignOnService' endpoint was ignored because its binding 'urn:mace:shibboleth:1.0:profiles:AuthnRequest' is not supported.<br>
MSIS7524: A 'SamlSingleSignOnService' endpoint was ignored because its binding 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign' is not supported.</span></font></p><p style="margin:5pt 0in;line-height:normal;font-family:times new roman,serif">
<br><font style="font-family:arial,helvetica,sans-serif" size="2"><span id="ctl00_ContentPlaceHolder1_ExceptionMessageLabel"></span></font></p><p style="margin:5pt 0in;line-height:normal;font-family:times new roman,serif">
<font style="font-family:arial,helvetica,sans-serif" size="2"><span id="ctl00_ContentPlaceHolder1_ExceptionMessageLabel">and 4 Errors with EventID=364:</span></font></p><p style="margin:5pt 0in;line-height:normal;font-family:times new roman,serif">
<font style="font-family:arial,helvetica,sans-serif" size="2"><span id="ctl00_ContentPlaceHolder1_ExceptionMessageLabel">Encountered error during federation passive request. <br><br>Additional Data <br><br>Exception details: <br>
Microsoft.IdentityServer.Configuration.ReadServiceConfigFailedException: MSIS2001: Configuration service URL is not configured. ---> Microsoft.IdentityServer.PolicyModel.Client.StorageAuthorizationException: ADMIN0120: The client is not authorized to access the endpoint net.tcp://localhost:1500/policy. The client process must be run with elevated administrative privileges.<br>
at Microsoft.IdentityServer.PolicyModel.Client.PolicyStoreClientManager.SearchWorker(Filter filter, Int32 maxObjects, String[] propertyNames, Boolean firstTry, PropertyFactoryBase propertyFactory)<br> at Microsoft.IdentityServer.PolicyModel.Client.PolicyStoreClientManager.Search(Filter filter, Int32 maxObjects, String[] propertyNames, PropertyFactoryBase propertyFactory)<br>
at Microsoft.IdentityServer.PolicyModel.Client.PolicyManagerBase.Search[T](Filter filter, Int32 maxItems, String[] properties, PropertyFactoryBase propertyFactory)<br> at Microsoft.IdentityServer.PolicyModel.Client.PolicyManagerBase.GetItem[T](Filter filter, String[] properties, PropertyFactoryBase propertyFactory)<br>
at Microsoft.IdentityServer.Configuration.ServiceConfigurationReader.ReadServiceConfiguration()<br> --- End of inner exception stack trace ---<br> at Microsoft.IdentityServer.Configuration.ServiceConfigurationReader.ReadServiceConfiguration()<br>
at Microsoft.IdentityServer.Configuration.ServiceConfigurationReader.get_ServiceConfiguration()<br> at Microsoft.IdentityServer.Configuration.ServiceConfigurationReader.GetHostNetTcpPort()<br> at Microsoft.IdentityServer.Web.PassivePolicyManager..ctor()<br>
at Microsoft.IdentityServer.Web.FederationPassiveAuthentication.GetIssuerFriendlyName()<br><br>Microsoft.IdentityServer.PolicyModel.Client.StorageAuthorizationException: ADMIN0120: The client is not authorized to access the endpoint net.tcp://localhost:1500/policy. The client process must be run with elevated administrative privileges.<br>
at Microsoft.IdentityServer.PolicyModel.Client.PolicyStoreClientManager.SearchWorker(Filter filter, Int32 maxObjects, String[] propertyNames, Boolean firstTry, PropertyFactoryBase propertyFactory)<br> at Microsoft.IdentityServer.PolicyModel.Client.PolicyStoreClientManager.Search(Filter filter, Int32 maxObjects, String[] propertyNames, PropertyFactoryBase propertyFactory)<br>
at Microsoft.IdentityServer.PolicyModel.Client.PolicyManagerBase.Search[T](Filter filter, Int32 maxItems, String[] properties, PropertyFactoryBase propertyFactory)<br> at Microsoft.IdentityServer.PolicyModel.Client.PolicyManagerBase.GetItem[T](Filter filter, String[] properties, PropertyFactoryBase propertyFactory)<br>
at Microsoft.IdentityServer.Configuration.ServiceConfigurationReader.ReadServiceConfiguration()<br><br><br>The problem is on this machine or I was wrong something in the Shibboleth configuration?</span></font></p><p style="margin:5pt 0in;line-height:normal;font-family:times new roman,serif">
<font style="font-family:arial,helvetica,sans-serif" size="2"><span id="ctl00_ContentPlaceHolder1_ExceptionMessageLabel">Thanks<br></span></font></p><h1><span style="font-size:9pt;font-family:"Verdana","sans-serif";font-weight:normal"><br>
</span></h1>