When I try to add an ADFS user to the 'Administrators for User Profile Service' list through Central Administration I get the error 'Specified argument was out of the range of valid values. Parameter name: claim'.
Trying to add via PowerShell via the following command gives the same error:
$serviceapp = Get-SPServiceApplication myApplicationId
$security = Get-SPServiceApplicationSecurity $serviceapp -Admin
$principalUser = New-SPClaimsPrincipal -Identity "i:0e.t|adfs|[email protected]" -IdentityType EncodedClaim
Grant-SPObjectSecurity $security -Principal $principalUser -Rights "Full Control"
Set-SPServiceApplicationSecurity $serviceapp -ObjectSecurity $security -Admin
ULS logs the following error as well: The claim 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn: [email protected]' could not be added to the delegated administrators group because it does not represent a user or security group.
Also, when I try to give an ADFS user Connection Permissions to the User Profile Service through Central Administration, I get the error, "The User Profile Service Requires domain credentials for connection access":
How do you add ADFS users as User Profile Service Administrators?
