<HTML>
<HEAD>
<TITLE>FW: ADFS communication problem</TITLE>
</HEAD>
<BODY>
<FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Hi,<BR>
<BR>
I have a similar environment setup. It appears from your error messages, below, that there is a problem with your ADFS configuration. The URLs look incorrect.<BR>
<BR>
HTH,<BR>
<BR>
Skylar<BR>
------ Forwarded Message<BR>
<B>From: </B>giuseppe parisella <<a href="gparise2la@gmail.com">gparise2la@gmail.com</a>><BR>
<B>Reply-To: </B>Shib Dev <<a href="dev@shibboleth.net">dev@shibboleth.net</a>><BR>
<B>Date: </B>Fri, 6 Jan 2012 18:25:13 +0100<BR>
<B>To: </B><<a href="dev@shibboleth.net">dev@shibboleth.net</a>><BR>
<B>Subject: </B>ADFS communication problem<BR>
<BR>
Hi,<BR>
sorry for my english. I'm following the guide <B>Federated Collaboration with Shibboleth 2.0 and SharePoint 2010 Technologies</B> at the site <a href="http://technet.microsoft.com/en-us/library/adfs2-step-by-step-guides%28WS.10%29.aspx">http://technet.microsoft.com/en-us/library/adfs2-step-by-step-guides%28WS.10%29.aspx</a>. So I have 3 virtual machines (one for ADFS, one for Shibboleth and one for Sharepoint2010). I have configured the shibboleth machine as showed in the guide and the status is ok (the <a href="https://idmgt-ip0.idmgtext.demo:8443/idp/profile/Status">https://idmgt-ip0.idmgtext.demo:8443/idp/profile/Status</a> page shows ok). For the ADFS side, the guide doesn't tell anything and so I have followed other documents on the web. Before configure the Sharepoint side, I have to test if it's all right and so, from the ADFS machine, I visit <a href="https://sts.idmgt.demo/adfs/ls/IdpInitiatedSignon.aspx">https://sts.idmgt.demo/adfs/ls/IdpInitiatedSignon.aspx</a> (sts.idmgt.demo is the ADFS machine'd alias name) from Internet Explorer and gets out the following error message: <BR>
<BR>
</SPAN></FONT><SPAN STYLE='font-size:11pt'><FONT FACE="Arial">There was a problem accessing the site. Try to browse to the site again. <BR>
</FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
</FONT><FONT FACE="Arial">If the problem persists, contact the administrator of this site and provide the reference number to identify the problem. <BR>
</FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
</FONT><FONT FACE="Arial">MSIS7012: An error occurred while processing the request. Contact your administrator for details.<BR>
</FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
</FONT><FONT FACE="Arial">In the Event Viewer there is a Warning <BR>
</FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
</FONT><FONT FACE="Arial">Trust monitoring service detected changes in policy of 'Shibboleth IdP', but did not automatically apply the changes on the trust partner. <BR>
<BR>
Additional Data <BR>
Warnings: <BR>
MSIS7524: A 'ArtifactResolutionService' endpoint was ignored because its binding 'urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding' is not supported.<BR>
MSIS7524: A 'SamlSingleSignOnService' endpoint was ignored because its binding 'urn:mace:shibboleth:1.0:profiles:AuthnRequest' is not supported.<BR>
MSIS7524: A 'SamlSingleSignOnService' endpoint was ignored because its binding 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign' is not supported.<BR>
</FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
</FONT><FONT FACE="Arial">and 4 Errors with EventID=364:<BR>
</FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
</FONT><FONT FACE="Arial">Encountered error during federation passive request. <BR>
<BR>
Additional Data <BR>
<BR>
Exception details: <BR>
Microsoft.IdentityServer.Configuration.ReadServiceConfigFailedException: MSIS2001: Configuration service URL is not configured. ---> Microsoft.IdentityServer.PolicyModel.Client.StorageAuthorizationException: ADMIN0120: The client is not authorized to access the endpoint net.tcp://localhost:1500/policy. The client process must be run with elevated administrative privileges.<BR>
at Microsoft.IdentityServer.PolicyModel.Client.PolicyStoreClientManager.SearchWorker(Filter filter, Int32 maxObjects, String[] propertyNames, Boolean firstTry, PropertyFactoryBase propertyFactory)<BR>
at Microsoft.IdentityServer.PolicyModel.Client.PolicyStoreClientManager.Search(Filter filter, Int32 maxObjects, String[] propertyNames, PropertyFactoryBase propertyFactory)<BR>
at Microsoft.IdentityServer.PolicyModel.Client.PolicyManagerBase.Search[T](Filter filter, Int32 maxItems, String[] properties, PropertyFactoryBase propertyFactory)<BR>
at Microsoft.IdentityServer.PolicyModel.Client.PolicyManagerBase.GetItem[T](Filter filter, String[] properties, PropertyFactoryBase propertyFactory)<BR>
at Microsoft.IdentityServer.Configuration.ServiceConfigurationReader.ReadServiceConfiguration()<BR>
--- End of inner exception stack trace ---<BR>
at Microsoft.IdentityServer.Configuration.ServiceConfigurationReader.ReadServiceConfiguration()<BR>
at Microsoft.IdentityServer.Configuration.ServiceConfigurationReader.get_ServiceConfiguration()<BR>
at Microsoft.IdentityServer.Configuration.ServiceConfigurationReader.GetHostNetTcpPort()<BR>
at Microsoft.IdentityServer.Web.PassivePolicyManager..ctor()<BR>
at Microsoft.IdentityServer.Web.FederationPassiveAuthentication.GetIssuerFriendlyName()<BR>
<BR>
Microsoft.IdentityServer.PolicyModel.Client.StorageAuthorizationException: ADMIN0120: The client is not authorized to access the endpoint net.tcp://localhost:1500/policy. The client process must be run with elevated administrative privileges.<BR>
at Microsoft.IdentityServer.PolicyModel.Client.PolicyStoreClientManager.SearchWorker(Filter filter, Int32 maxObjects, String[] propertyNames, Boolean firstTry, PropertyFactoryBase propertyFactory)<BR>
at Microsoft.IdentityServer.PolicyModel.Client.PolicyStoreClientManager.Search(Filter filter, Int32 maxObjects, String[] propertyNames, PropertyFactoryBase propertyFactory)<BR>
at Microsoft.IdentityServer.PolicyModel.Client.PolicyManagerBase.Search[T](Filter filter, Int32 maxItems, String[] properties, PropertyFactoryBase propertyFactory)<BR>
at Microsoft.IdentityServer.PolicyModel.Client.PolicyManagerBase.GetItem[T](Filter filter, String[] properties, PropertyFactoryBase propertyFactory)<BR>
at Microsoft.IdentityServer.Configuration.ServiceConfigurationReader.ReadServiceConfiguration()<BR>
<BR>
<BR>
The problem is on this machine or I was wrong something in the Shibboleth configuration?<BR>
</FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
</FONT><FONT FACE="Arial">Thanks<BR>
</FONT></SPAN><FONT SIZE="1"><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:9pt'><B><BR>
<BR>
</B></SPAN></FONT></FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'><BR>
<HR ALIGN=CENTER SIZE="3" WIDTH="95%"></SPAN></FONT><FONT SIZE="2"><FONT FACE="Consolas, Courier New, Courier"><SPAN STYLE='font-size:10pt'>--<BR>
To unsubscribe from this list send an email to <a href="dev-unsubscribe@shibboleth.net">dev-unsubscribe@shibboleth.net</a><BR>
<BR>
------ End of Forwarded Message<BR>
</SPAN></FONT></FONT>
</BODY>
</HTML>