I have configured my High Trust Application by following steps mention in below link.


When I launched my app got below error.

An error occurred while processing your request.

I did spent some time in digging the issue and after going through below blog I found out the issue and the actual error is The Azure Access Control service is unavailable.

Below details is from request object,

SPRedirectMessage : EndpointAuthorityMatches

SPErrorInfo: The Azure Access Control service is unavailable.

https://samlman.wordpress.com/2015/03/01/more-troubleshooting-tips-for-high-trust-apps-on-sharepoint-2013/ http://www.chrisjohnson.io/2013/09/20/launching-sharepoint-apps-launch-sequence-debugging-and-appredirect-aspx/

I am using self signed certificate and as per below blog it says that it never works with Self Signed certificate. But as per microsoft's site it should work


Really appreciate if anyone can help me setting up High Trust AddIn on my SharePoint 2016 environment.

  • The ACS error is usually erroneous and is a fallback message. Typically the error resolves around the high trust cert, e.g. the app doesn't have access to it or SharePoint doesn't properly trust it, etc. – Trevor Seward Apr 11 '18 at 23:58
  • Thanks @TrevorSeward . Is there a way to nail down the isssue. For e.g. getting details from ULS. While I was looking at ULS got "Non-OAuth request. IsAuthenticated=True, UserIdentityName=" message. Does this looks good to you? – Ravi Khambhati Apr 12 '18 at 15:52
  • Not without seeing the app package and web.config associated with the app as well as the generated ID in the App Catalog. That message isn't an error message, just a generic message indicating the request isn't an OAuth one. – Trevor Seward Apr 12 '18 at 15:53
  • I have configured my SharePoint web app with SSL certificate. Will that be an issue? – Ravi Khambhati Apr 12 '18 at 18:06
  • I just reset everything all over again and when I press F5 it works. But when I packaged it to IIS got error which says "Cannot construct a X509SigningCredentials instance for a certificate without the private key." – Ravi Khambhati Apr 13 '18 at 0:55

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.