Event ID 724 — Trust Policy and Configuration

Applies To: Windows Server 2008 R2

The Active Directory Federation Services (AD FS) trust policy file defines the set of parameters that a Federation Service requires to identify partners, certificates, account stores, claims, and the various properties of these entities that are associated with the Federation Service.

Event Details

Product: Windows Operating System
ID: 724
Source: Microsoft-Windows-ADFS
Version: 6.1
Symbolic Name: LdapUnknownAttributeType
Message: A client request to the Federation Service failed because the syntax of a Lightweight Directory Access Protocol (LDAP) attribute is different from the standard syntaxes that are defined in RFC 2252.

This event can occur if the directory schema has been extended to new syntaxes.

User Action
If this is a valid attribute with a new syntax, extract this claim from a custom transform module instead.

Additional Data
LDAP Server: %1
LDAP attribute name: %2
LDAP attribute type: %3

Resolve

Define a valid LDAP attribute

If this is a valid attribute with a new syntax, extract this claim from a custom transform module instead, or define a valid Lightweight Directory Access Protocol (LDAP) attribute or existing syntax. Use an LDAP search tool such as Ldp.exe to verify that the attribute can be retrieved with an LDAP query.

Verify

Verify that you can access the Active Directory Federation Services (AD FS)-enabled application from a client browser and that the resource can be accessed.

Trust Policy and Configuration

Active Directory Federation Services