When a customer goes to https://windows.azure.com, signs in, selects their “ACSv2” namespace and clicks the "Manage | Access Control Service" toolbar button, a web page is displayed with the following error:
An error occurred while processing your request.
HTTP Error code: 403
Message: ACS50000: There was an error issuing a token.
Inner Message: ACS60000: An error occurred while processing rules for relying party 'https://mynamespace.accesscontrol.windows.net/v2/mgmt/service' using identity provider 'uri:WindowsLiveID'
Inner Message: ACS60001: No output claims were generated during rules processing.
Trace ID: 07dcb4c8-9287-4ad7-a1e1-c6f5673a76a2
Timestamp: 2011-10-07 18:07:18Z
Customers signing in at https://windows.azure.com using Co-Admin credentials, where the Co-Admin was added to the subscription prior to Oct 2012, will see this issue.
Note: Co-Admins are now fully supported in managing ACSv2 namespaces.
Now sign out and sign in using the Co-Admin credentails and you will be able to manage ACSV2 namespaces.
Alternatively you can sign in at https://windows.azure.com using the credentials associated with the Service Administrator and manage “ACSV2” namespaces.
You can also log in to https://windows.azure.com using the credentials associated with the Service Administrator account, click on the Access Control namespace you want to manage. Then under "Administration | Portal administrators", click "Add", add the desired credentials and save. This will allow the newly added credentials to sign in and manage the namespace by directly going to the URL https://<namespace>.accesscontrol.windows.net/v2/mgmt/web.