When I try to add an ADFS user to the 'Administrators for User Profile Service' list through Central Administration I get the error 'Specified argument was out of the range of valid values. Parameter name: claim'.
Trying to add via PowerShell via the following command gives the same error:
$serviceapp = Get-SPServiceApplication myApplicationId $security = Get-SPServiceApplicationSecurity $serviceapp -Admin $principalUser = New-SPClaimsPrincipal -Identity "i:firstname.lastname@example.org" -IdentityType EncodedClaim Grant-SPObjectSecurity $security -Principal $principalUser -Rights "Full Control" Set-SPServiceApplicationSecurity $serviceapp -ObjectSecurity $security -Admin
ULS logs the following error as well: The claim 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn: email@example.com' could not be added to the delegated administrators group because it does not represent a user or security group.
Also, when I try to give an ADFS user Connection Permissions to the User Profile Service through Central Administration, I get the error, "The User Profile Service Requires domain credentials for connection access":
How do you add ADFS users as User Profile Service Administrators?