Subject: Issue While Importing Metadata and Configuring ADFS SSO Rules

Ravinder Makkar 100 Reputation points
2026-07-22T17:24:03.49+00:00

Hi Support Team,

I am facing an issue while configuring SSO on the ADFS server.

I have successfully imported the metadata on the ADFS server and configured the required ADFS claim rules for SSO. However, when attempting to test the authentication, I am encountering the following error: Please find the below screen shot. Please help

User's image

Thanks and regards

Microsoft Security | Active Directory Federation Services
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Christian Weisse 80 Reputation points Microsoft Employee
    2026-07-28T12:32:15.5833333+00:00

    @Ravinder Makkar
    The error suggests the Tokenrequest was signed but the ADFS server failed to lookup/verify the signing key
    It looks like this is a SAML2.0 Application using SAML Post Profile
    The Signature preferably has a "KeyInfo"-property
    AD FS supports one of the following three

    • X509Certificate
    • X509SKI
    • X509IssuerSerial
      Whilst KeyInfo can contain multiple of those Elements ADFS only uses the first entry of a KeyInfo which needs to be one of those mentioned above. If something else is the first Element eg : KeyName (which is not supported by ADFS)
      then you may ed up with this error

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.