I have a web application with an ADFS 2.0 trusted identity provider, and it's the only authentication provider. When I login, SharePoint correctly associates me with the my stored profile, but calls to GetUserProfileByName in UserProfileService.asmx fail even after manually setting AccountName to DOMAIN\USERNAME.
I've tried querying through a UDC that had stored domain credentials too with no success. The error I'm getting when calling the GetUserProfileByName is:
The following query failed: GetUserProfileByName (User: 0e.t||, Form Name: TestGetUserProfileSITESTEST_PUBnew, IP: , Connection Target: dc/UserProfileConnection.udcx, Request: /_layouts/FormServer.aspx?XsnLocation=/FormServerTemplates/TestGetUserProfileSITESTEST_PUBnew.xsn&SaveLocation=/up&Source=/up/Forms/AllItems.aspx&DefaultItemOpen=1, Form ID: urn:schemas-microsoft-com:office:infopath:TestGetUserProfileSITESTEST-PUBnew:-myXSD-2011-07-26T21-38-47 Type: DataAdapterException, Exception Message: The remote server returned an error: (500) Internal Server Error. Server was unable to process request. ---> Attempted to perform an unauthorized operation. The remote server returned an error: (500) Internal Server Error.)
If I extend the web application and add Kerberos or NTLM authentication to the new zone, the UserProfileService works fine in the new zone.
I cannot get the UserProfileService to work for trusted identity providers. Has anyone found a solution?