Event ID 663 — Federation Server Communication

  • Article

Applies To: Windows Server 2008

Federation Server communication is communication between federation servers and federation server proxies. A federation server proxy should be updated from the Federation Service. Federation Server communication fails if the federation server proxy cannot be updated and the information in the trust policy is configured incorrectly.

Event Details

Product: Windows Operating System
ID: 663
Source: Microsoft-Windows-ADFS
Version: 6.0
Symbolic Name: NoAccountStoresOrTrustedRealms
Message: A sign-in request was received, but no account stores or account partners are configured in the Federation Service trust policy.

Until at least one account store or account partner is configured in the trust policy, no sign-in requests can be processed.

User Action
Ensure that the Federation Service trust policy defines at least one account store or account partner.

This error may occur in the Federation Service Proxy when data replication from the Federation Service is delayed. To refresh the trust policy immediately, restart Internet Information Services (IIS) in the Federation Service Proxy.

Resolve

Define at least one account store or account partner in the trust policy

Ensure that the trust policy defines at least one account store or account partner. This error may occur on the federation server proxy when data replication from the Federation Service is delayed. To refresh the trust policy immediately, restart Internet Information Services (IIS) on the federation server proxy.

To perform this procedure, you must be a member of the local Administrators group, or you must have been delegated the appropriate authority.

To restart IIS:

  1. On the federation server proxy, click Start, and then click Command Prompt.

  2. Type the following command, and then press ENTER:

    iisreset

  3. Close the command prompt.

Verify

Verify that a specific event (ID 674) was generated on the federation server proxy computer. This event is generated when the federation server proxy is able to successfully communicate with the Federation Service.

To perform this procedure, you must be a member of the local Administrators group, or you must have been delegated the appropriate authority.

  1. Log on to a client computer with Internet access.

  2. Open a browser window, and then type the Uniform Resource Locator (URL) for the Federation Service endpoint, along with the path to the clientlogon.aspx page that is stored on the federation server proxy.

  3. Press ENTER.

    Note   At this point your browser should display the error Server Error in '/adfs' Application. This step is necessary to generate event message 674 to verify that the clientlogon.aspx page is being loaded properly by Internet Information Services (IIS).

  4. Log on to the federation server proxy.

  5. Click Start, point to Administrative Tools, and then click Event Viewer.

  6. In the details pane, double-click Application.

  7. In the Event column, look for event ID 674.

If the federation server proxy is configured properly, you see a new event in the Application log of Event Viewer, with the event ID 674. This event verifies that the federation server proxy was able to communicate successfully with the Federation Service.

Federation Server Communication

Active Directory Federation Services