Article ID: 2707338 - View products that this article applies to.
After you run the Microsoft Online Services Diagnostics and Logging (MOSDAL) Support Toolkit, the Active Directory Federation Services (AD FS) diagnostics log contains the following error message:
Note The AD FS diagnostics log is located at \Admin_Applications\SSO_Diagnostic_Tests\ADFSDiagnostic.txt.
There was an exception error during a login attempt.
Additionally, you may notice the following behavior when you sign in to your Microsoft cloud service such as Office 365, Windows Azure, or Windows Intune by using a federated account:
"There was a problem accessing this site" error message occurs before you can try to provide credentials to AD FS.
This issue may occur if one of the following conditions is true:
To resolve this issue, use one of the following methods, as appropriate for your situation.
Method 1: Troubleshoot AD FS connectivityUse the following Microsoft Knowledge Base article to troubleshoot AD FS service problems that might limit connectivity:
(http://support.microsoft.com/kb/2419389/ )Internet browser cannot display the AD FS webpage when a federated user tries to sign in to Office 365 web resources
Method 2: Troubleshoot AD FS Proxy server functionalityIf sign-in problems that are described earlier only occur when you are connected to AD FS from outside the on-premises network, use the following Microsoft Knowledge Base article to troubleshoot AD FS Proxy service problems that might limit connectivity:
(http://support.microsoft.com/kb/2712961/ )How to troubleshoot AD FS endpoint connection issues when users sign in to Office 365, Windows Intune, or Windows Azure
Method 3: Troubleshoot AD FS SSL certificate problemsIf a sign-in attempt to a Microsoft cloud service results in a certificate warning from the AD FS server, use the following Microsoft Knowledge Base article to troubleshoot SSL certificate problems:
(http://support.microsoft.com/kb/2523494/ )You receive a certificate warning from AD FS when you access Office 365 web resources by using a federated account
Method 4: Reset the AD FS service endpoints to the default configurationTo make sure that the AD FS service endpoint configuration metadata is updated to the Windows Azure Active Directory (Windows Azure AD) authentication system, use the "How to update the configuration of the Office 365 federated domain" section of the following Microsoft Knowledge Base article:
(http://support.microsoft.com/kb/2647048/ )How to update or to repair the configuration of the Office 365 federated domain
Method 5: Troubleshoot Kerberos authentication problems with AD FSTo diagnose and resolve Kerberos authentication problems with AD FS, use the following Microsoft Knowledge Base article:
(http://support.microsoft.com/kb/2461628/ )A federated user is repeatedly prompted for credentials during sign-in to Office 365
Method 6: AD FS service problems limit sign-inTo diagnose and resolve common AD FS service problems that limit authentication, use the following Microsoft Knowledge Base article:
(http://support.microsoft.com/kb/2713898/ )"There was a problem accessing the site" error from AD FS when a federated user signs in to an organizational account
Still need help? Go to the Office 365 Community
(http://community.office365.com/)website or the Windows Azure Active Directory Forums
Article ID: 2707338 - Last Review: December 3, 2013 - Revision: 15.0