Skip Ribbon Commands
Skip to main content

Xadean's Empirical Musing

:

Quick Launch

Xadean's Empirical Musing > Posts > AD FS “Bad Request” Error After Updating Token-Decrypting and Token-Signing Certificates
February 04
AD FS “Bad Request” Error After Updating Token-Decrypting and Token-Signing Certificates

Environment:

  • Active Directory Federation Service (AD FS) role configured on Windows 2012 R2 Active Directory Directory Services (AD DS) Domain Controller (DC)
  • WAP 2012 R2 (not domain joined)
  • Office 365 tenant subscription w/ on-premises AD synchronizing a federated domain

 

Error: When trying to authenticate to Office 365, getting a "bad request" error message after entering credentials in AD FS FBA form.

 

Cause: Experienced the preceding error after certificate changes in the AD FS farm.

 

Symptoms:

  • AD FS service (adfssrv) hangs in starting state when an AD Group Managed Service account is assigned 'Log On As' (Reference AD Grp Managed Svc Accounts: https://itconnect.uw.edu/wares/msinf/ous/gmsa/).
    • The resolution to get the AD FS service to start is to change the Microsoft Key Distribution Service (KdsSvc) from Manual (Trigger Start) to Automatic (Trigger Start) with the following command from an elevated command prompt:

      sc triggerinfo kdssvc start/networkon

       

  • Able to authenticate to test URL (https://adfs.contoso.com/adfs/ls/idpinitiatedsignon.aspx), but not to O365.

 

Resolution: Need to update ws-fed after any certificate changes in AD FS farm using the following prescribed steps.

Open Windows PowerShell and execute these commands:

Add-PSSnapin Microsoft.Adfs.Powershell

 

#PS command to re-enable AutoCertificateRollover

Set-AdfsProperties -AutoCertificateRolover $true

 

#PS command to verify properties

Get-AdfsProperties

 

# PS command to immediately generate new self-signed certifactes

Update-AdfsCertificate -Urgent

 

#CMD prompt command to query kdssvc service

sc qtriggerinfo kdssvc

 

#CMD prompt command to change the kdssvc to automatic and trigger on network connection

sc triggerinfo kdssvc start/networkon

 

# To update ws-fed after changing ADFS certificates

When using Windows Azure Active Directory Module for Windows PowerShell, run the following command:

 

connect-MsolService

 

Update-MsolFederatedDomain -DomainName contoso.com (replace contoso.com with your federated domain name)

Get-MsolFederationProperty -DomainName contoso.com

Comments

Yeezy Slides

https://www.yeezyofficialwebsite.us.com/ Yeezy Official Website
https://www.yeezy--shoes.us.com/ Yeezy Shoes
https://www.yeezysupply.us/ Yeezy Supply
https://www.yeezyshoess.org/ Yeezy Shoes
https://www.adidas-yeezyshoess.com/ Yeezy Shoes
https://www.adidas-yeezyshoess.com/ Adidas Yeezy
https://www.adidas-yeezyslides.com/ Yeezy Slides
https://www.adidas-yeezyslides.com/ Adidas Yeezy
https://www.yeezy350.us/ Yeezy 350
https://www.yeezyofficialwebsite.us/ Yeezy Official Website
https://www.yeezyofficialwebsite.com/ Yeezy Official Website
https://www.lvoutlet.us.com/ Louis Vuitton
https://www.lvoutlet.us.com/ Louis Vuitton Outlet
https://www.lvoutlets.us.com/ Louis Vuitton
https://www.lvoutlets.us.com/ Louis Vuitton Outlet
https://www.louis-vuitton-outlets.us.com/ Louis Vuitton
https://www.louis-vuitton-outlets.us.com/ Louis Vuitton Outlet
https://www.lv-outlet.us.com/ Louis Vuitton
https://www.lv-outlet.us.com/ Louis Vuitton Outlet
https://www.yeezyshoes.de/ Yeezy Shoes
https://www.yeezysupplys.de/ Yeezy Supply
https://www.yeezy-slides.de/ Yeezy Slides
https://www.yeezy-supply.de/ Yeezy Supply
https://www.yeezy-350.de/ Yeezy 350
https://www.yeezyshoess.us/ Yeezy Shoes
https://www.yeezy-slidess.us/ Yeezy Slides
https://www.adidayeezy.us.com/ Adidas Yeezy
https://www.yeezyadidas.us.com/ Yeezy Adidas
https://www.yeezysupplys.com/ Yeezy Supply
https://www.adida.us.com/ Adidas Yeezy
https://www.yeezy2024.us.com/ Yeezy 2024
https://www.yeezys-supply.us.com/ Yeezy Supply
https://www.yeezys-supplys.us.com/ Yeezy Supply
https://www.yeezy-slidess.us.com/ Yeezy Slides
https://www.yeezy350official.us.com/ Yeezy 350
https://www.yeezy350official.us.com/ Yeezy Official
https://www.yeezyshoesofficial.us.com/ Yeezy Shoes
https://www.yeezyshoesofficial.us.com/ Yeezy Official
https://www.yeezys-supplys.com/ Yeezy Supply
https://www.yeezys-shoes.com/ Yeezy Shoes
https://www.yeezy-350.com/ Yeezy 350
https://www.yeezys-slidess.com/ Yeezy Slides
https://www.yeezysupplyofficial.us.com/ Yeezy Supply
https://www.yeezysupplyofficial.us.com/ Yeezy Official
https://www.yeezyslidesofficial.us.com/ Yeezy Slides
https://www.yeezyslidesofficial.us.com/ Yeezy Official
https://www.yeezyboost350v2.us.com/ Yeezy 350
https://www.yeezyofficialwebsites.com/ Yeezy Official Website
https://www.yeezyofficialwebsites.us.com/ Yeezy Official Website
https://www.yeezyshoesofficialwebsite.us/ Yeezy Shoes
https://www.yeezyshoesofficialwebsite.us/ Yeezy Official Website
https://www.yeezy-supply.us/ Yeezy Supply
https://www.yeezy-350.us/ Yeezy 350
https://www.adidasyeezyshoess.com/ Yeezy Shoes
https://www.adidasyeezyshoess.com/ Adidas Yeezy
https://www.yeezysslidess.com/ Yeezy Slides
https://www.adidasyeezys.us.com/ Adidas Yeezy
https://www.adidas-yeezy-slides.us.com/ Yeezy Slides
https://www.omegaswatches.net/ Omega Watches
https://www.moncleroutletfactory.com/ Moncler Outlet
https://www.icasejpn.com/  ルイヴィトン vuitton iphone15 proケース

Tags:Yeezy Shoes,Yeezy,Yeezy Supply,Adidas Yeezy,Yeezy Slides
 on 6/12/2024 10:59 AM

Yeezy Shoes

https://www.yeezyofficialwebsite.us.com/ Yeezy Official Website
https://www.yeezy--shoes.us.com/ Yeezy Shoes
https://www.yeezysupply.us/ Yeezy Supply
https://www.yeezyshoess.org/ Yeezy Shoes
https://www.yeezy350.us/ Yeezy 350
https://www.yeezyofficialwebsite.us/ Yeezy Official Website
https://www.yeezy-stores.us.com/ Yeezy Stores
https://www.yeezyslidesstore.us.com/ Yeezy Slides
https://www.yeezyslidesstore.us.com/ Yeezy Store
https://www.lvoutlet.us.com/ Louis Vuitton
https://www.lvoutlet.us.com/ Louis Vuitton Outlet
https://www.lvoutlets.us.com/ Louis Vuitton
https://www.lvoutlets.us.com/ Louis Vuitton Outlet
https://www.louis-vuitton-outlets.us.com/ Louis Vuitton
https://www.louis-vuitton-outlets.us.com/ Louis Vuitton Outlet
https://www.lv-outlet.us.com/ Louis Vuitton
https://www.lv-outlet.us.com/ Louis Vuitton Outlet
https://www.yeezyshoes.de/ Yeezy Shoesa
https://www.yeezysupplys.de/ Yeezy Supply
https://www.yeezy-slides.de/ Yeezy Slides
https://www.yeezy-supply.de/ Yeezy Supply
https://www.yeezy-350.de/ Yeezy 350
https://www.yeezyshoess.us/ Yeezy Shoes
https://www.yeezy-slidess.us/ Yeezy Slides
https://www.adidayeezy.us.com/ Adidas Yeezy
https://www.yeezyadidas.us.com/ Yeezy Adidas
https://www.adida.us.com/ Adidas Yeezy
https://www.yeezy2024.us.com/ Yeezy 2024
https://www.yeezyofficialwebsites.us.com/ Yeezy Official Website
https://www.yeezys-supply.us.com/ Yeezy Supply
https://www.yeezys-supplys.us.com/ Yeezy Supply
https://www.yeezy-slidess.us.com/ Yeezy Slides
https://www.yeezy350official.us.com/ Yeezy 350
https://www.yeezy350official.us.com/ Yeezy Official
https://www.yeezyshoesofficial.us.com/ Yeezy Shoes
https://www.yeezyshoesofficial.us.com/ Yeezy Official
https://www.yeezysupplyofficial.us.com/ Yeezy Supply
https://www.yeezysupplyofficial.us.com/ Yeezy Official
https://www.yeezyslidesofficial.us.com/ Yeezy Slides
https://www.yeezyslidesofficial.us.com/ Yeezy Official
https://www.yeezyboost350v2.us.com/ Yeezy 350
https://www.yeezyshoesofficialwebsite.us/ Yeezy Shoes
https://www.yeezyshoesofficialwebsite.us/ Yeezy Official Website
https://www.yeezy-supply.us/ Yeezy Supply
https://www.adidasyeezys.us.com/ Adidas Yeezy
https://www.adidas-yeezy-slides.us.com/ Yeezy Slides
https://www.yeezy-350.us/ Yeezy 350

Tags:Yeezy Shoes,Yeezy,Yeezy Supply,Adidas Yeezy,Yeezy Slides
 on 9/30/2024 10:38 AM

Add Comment

Title


Body *


CAPTCHA *

 

Attachments