Event ID 689 — Federation Server Communication

  • Article

Applies To: Windows Server 2008

Federation Server communication is communication between federation servers and federation server proxies. A federation server proxy should be updated from the Federation Service. Federation Server communication fails if the federation server proxy cannot be updated and the information in the trust policy is configured incorrectly.

Event Details

Product: Windows Operating System
ID: 689
Source: Microsoft-Windows-ADFS
Version: 6.0
Symbolic Name: InvalidOperationInstantiatingSoapProxy
Message: The Simple Object Access Protocol (SOAP) client object for communicating with the Federation Service could not be created because of an invalid operation.
FS URL: %1
Client certificate thumbprint: %2

This condition can occur when the path that is specified by the TEMP environment variable is not writable by the application pool identity. The TEMP path is used by the .NET Framework to create a temporary assembly that is used for SOAP communication.

User Action
Grant the application pool identity access to the path that is specified in the TEMP environment variable.

Additional Data
Exception information:
%3

Resolve

Grant the application pool identity access

Grant the application pool identity access to the path that is specified in the TEMP environment variable.

Verify

Verify that a specific event (ID 674) was generated on the federation server proxy computer. This event is generated when the federation server proxy is able to successfully communicate with the Federation Service.

To perform this procedure, you must be a member of the local Administrators group, or you must have been delegated the appropriate authority.

  1. Log on to a client computer with Internet access.

  2. Open a browser window, and then type the Uniform Resource Locator (URL) for the Federation Service endpoint, along with the path to the clientlogon.aspx page that is stored on the federation server proxy.

  3. Press ENTER.

    Note   At this point your browser should display the error Server Error in '/adfs' Application. This step is necessary to generate event message 674 to verify that the clientlogon.aspx page is being loaded properly by Internet Information Services (IIS).

  4. Log on to the federation server proxy.

  5. Click Start, point to Administrative Tools, and then click Event Viewer.

  6. In the details pane, double-click Application.

  7. In the Event column, look for event ID 674.

If the federation server proxy is configured properly, you see a new event in the Application log of Event Viewer, with the event ID 674. This event verifies that the federation server proxy was able to communicate successfully with the Federation Service.

Federation Server Communication

Active Directory Federation Services