"AD FS Token-Signing certificate found in a token does not match the certificate registered" error after you run the MOSDAL Support Toolkit

Article translations Article translations
Article ID: 2707369 - View products that this article applies to.
Expand all | Collapse all

PROBLEM

After you run the Microsoft Online Services Diagnostics and Logging (MOSDAL) Support Toolkit, the Active Directory Federation Services (AD FS) diagnostics log shows the following error:
The AD FS Token-Signing certificate found in a token does not match the certificate registered with the Microsoft Office 365 authentication system.
Note This log is located at Admin_Applications\SSO_Diagnostic_Tests\ADFSDiagnostic.txt.

Additionally, when you sign in to your Microsoft cloud service such as Office 365, Windows Azure, or Windows Intune by using a federated account, login.microsoftonline.com may return an "Organization could not sign you in" error.

CAUSE

This issue occurs if the AD FS token-signing certificate is expired because AD FS certificate auto-renew is deactivated.

SOLUTION

To fix this issue, update the AD FS token-signing certificate info in the Windows Azure Active Directory (Windows Azure AD) authentication system. To do this, see the "How to update the configuration of the Office 365 federated domain" section of the following Microsoft Knowledge Base article:
2647048 How to update or to repair the configuration of the Office 365 federated domain

MORE INFORMATION

Still need help? Go to the Office 365 Community website or the Windows Azure Active Directory Forums website.

Properties

Article ID: 2707369 - Last Review: October 30, 2013 - Revision: 17.0
Applies to
  • Windows Azure
  • Microsoft Office 365
  • Microsoft Office 365 for enterprises (pre-upgrade)
  • Microsoft Office 365 for education  (pre-upgrade)
  • CRM Online via Office 365 E Plans
  • Windows Azure Recovery Services
Keywords: 
o365 o365a mosdal4.5 o365062011 o365e o365022013 o365m pre-upgrade after upgrade KB2707369

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com