Forum Discussion
ADFS 4.0 fail to redirect success IDP logon
Because it fails with the crypto issue, my guess would be:
1. They are using token encryption
2. They used the wrong certificate to encrypt the token
As a result, ADFS cannot parse the SAML structure properly. I have seen that in the past. Many third party IDP assume that ADFS is using the same certificate for token signature and token encryption. But that's not the case. Contact them and make them double check their configuration (ensure they are using the right certificate for the right purpose).
MicrosoftBecause it fails with the crypto issue, my guess would be:
1. They are using token encryption
2. They used the wrong certificate to encrypt the token
As a result, ADFS cannot parse the SAML structure properly. I have seen that in the past. Many third party IDP assume that ADFS is using the same certificate for token signature and token encryption. But that's not the case. Contact them and make them double check their configuration (ensure they are using the right certificate for the right purpose).
Thank's for this tip Pierre. I had to use the same certificate for signature and enctyption i my ADFS configuration.
