0

I have created a High Trust Console Remote Timer Job that connects to my SharePoint site making use of these links

https://docs.microsoft.com/en-us/sharepoint/dev/sp-add-ins/create-high-trust-sharepoint-add-ins

https://docs.microsoft.com/en-us/sharepoint/dev/sp-add-ins/package-and-publish-high-trust-sharepoint-add-ins

I created a new App-Principal with full control with this script I created. I use this for several apps that already work fine in production environment.

function RegisterAndTrustPlaceholderAppAllSiteCollections {
    param(
        [Parameter(Mandatory=$True,Position=1)] [string]$absoluteWebApplicationUrl
    )

    #AddSnapin Microsoft.SharePoint.PowerShell -Verbose

    Write-Verbose "   -Register AppPriciple with FullControl access to the webapplication" -Verbose

    if(-not $absoluteWebApplicationUrl.EndsWith('/')) {
        $absoluteWebApplicationUrl = "$absoluteWebApplicationUrl/"
    }

    $AppName = "Provider Placeholder App"
    $clientID = "bfeae944-65cb-4335-9ce4-7c024183c465"  
    $authRealm = Get-SPAuthenticationRealm -ServiceContext $absoluteWebApplicationUrl;
    $AppIdentifier = $clientID  + '@' + $authRealm;

    Register-SPAppPrincipal -NameIdentifier $AppIdentifier -Site $absoluteWebApplicationUrl -DisplayName $AppName | Out-Null
    Write-Verbose "     *App Registered" -Verbose

    $appPrincipal = Get-SPAppPrincipal -NameIdentifier $AppIdentifier -Site $absoluteWebApplicationUrl
    if($null -ne $appPrincipal) {
        #Remove-SPAppPrincipalPermission -appPrincipal $appPrincipal -site $absoluteWebApplicationUrl -Scope Site
        Remove-SPAppPrincipalPermission -Site $absoluteWebApplicationUrl -AppPrincipal $appPrincipal -Scope SiteSubscription   | Out-Null
        Write-Verbose "     *App Trust Removed" -Verbose
    }

    #Set-SPAppPrincipalPermission -Site $absoluteWebApplicationUrl -AppPrincipal $appPrincipal -Scope Site -Right FullControl -EnableAppOnlyPolicy | Out-Null
    Set-SPAppPrincipalPermission -Site $absoluteWebApplicationUrl -AppPrincipal $appPrincipal -Scope SiteSubscription -Right FullControl -EnableAppOnlyPolicy | Out-Null    
    Write-Verbose "     *App Trust Added" -Verbose

    #RemoveSnapin Microsoft.SharePoint.PowerShell -Verbose
}

I can connect to my sites with all the apps that use this principal. Everything works fine and I can read and edit data. However every time I connect to the site I see this in my ULS

"Trusted provider is missing. Provider: '00000003-0000-0ff1-ce00-000000000000'"

I created the SPTrustedRootAuthority and the SPTrustedSecurityTokenIssuer with these scripts. DOes the trustedSecurityTokenIssuerId need to be the same as my App-Principal ClientID?

function RecreateSPTrustedRootAuthority($certSerialNumber, $trustedSecurityTokenIssuerId) {
    #AddSnapin Microsoft.SharePoint.PowerShell -Verbose

    Get-SPTrustedRootAuthority | ForEach-Object { 
        if($_.Name -eq "RER") {

            $trustedSecurityTokenIssuerId = [string]$_.Id
            Remove-SPTrustedRootAuthority -Identity $trustedSecurityTokenIssuerId -Confirm:$false
            Write-Verbose "  -SPTrustedRooteAuthority Removed" -Verbose
        }
    }

    $wildcardSslCert = Get-ChildItem Cert:\LocalMachine\My | where { $_.SerialNumber -imatch $certSerialNumber }

    $wildcardSslCertPublicKeyOnly = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2
    $wildcardSslCertPublicKeyOnly.Import($wildcardSslCert.Export("Cert"))
    $newTrustedRootAuthority = New-SPTrustedRootAuthority -Name "RER" -Certificate $wildcardSslCertPublicKeyOnly
    Write-Verbose "  -SPTrustedRootAuthority created" -Verbose

    #RemoveSnapin Microsoft.SharePoint.PowerShell -Verbose
}

function RecreateSPTrustedSecurityTokenIssuer($certSerialNumber, $trustedSecurityTokenIssuerId) {
    #AddSnapin Microsoft.SharePoint.PowerShell -Verbose

    $realm = Get-SPAuthenticationRealm
    $fullIssuerIdentifier = $trustedSecurityTokenIssuerId + '@' + $realm

    Get-SPTrustedSecurityTokenIssuer | ForEach-Object { 

        if($_.Name -eq "RER") {

            $trustedSecurityTokenIssuerId = [string]$_.Id
            Remove-SPTrustedSecurityTokenIssuer -Identity $trustedSecurityTokenIssuerId -Confirm:$false
            Write-Verbose "  -SPTrustedSecurityTokenIssuer Removed" -Verbose
        }
    }
    $wildcardSslCert = Get-ChildItem Cert:\LocalMachine\My | where { $_.SerialNumber -imatch $certSerialNumber }
    $wildcardSslCertPublicKeyOnly = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2
    $wildcardSslCertPublicKeyOnly.Import($wildcardSslCert.Export("Cert"))
    $newTrustedSecurityTokenIssuer = New-SPTrustedSecurityTokenIssuer -Name "RER" -Certificate $wildcardSslCertPublicKeyOnly -RegisteredIssuerName $fullIssuerIdentifier -IsTrustBroker
    Write-Verbose "  -SPTrustedSecurityTokenIssuer created" -Verbose

    #RemoveSnapin Microsoft.SharePoint.PowerShell -Verbose
}

This is a larger section of my ULS

Entering monitored scope (Request (POST:http://localhost:80/_vti_bin/client.svc/ProcessQuery)). Parent No
Name=Request (POST:http://localhost:80/_vti_bin/client.svc/ProcessQuery)
Entering monitored scope (Application Authentication Pipeline). Parent Request (POST:http://localhost:80/_vti_bin/client.svc/ProcessQuery)
[Forced due to logging gap, cached @ 04/08/2019 09:43:01.62, Original Level: Verbose] SQL connection time: 0.0999 for Data Source=DS;Initial Catalog=SP_Config;Integrated Security=True;Persist Security Info=False;Enlist=False;Pooling=True;Min Pool Size=0;Max Pool Size=100;PoolBlockingPeriod=Auto;Asynchronous Processing=False;Connection Reset=True;MultipleActiveResultSets=False;Replication=False;Connect Timeout=15;Encrypt=False;TrustServerCertificate=False;Load Balance Timeout=0;Packet Size=8000;Type System Version=Latest;Application Name=".Net SqlClient Data Provider";User Instance=False;Context Connection=False;Transaction Binding="Implicit Unbind";ApplicationIntent=ReadWrite;MultiSubnetFailover=False;TransparentNetworkIPResolution=True;ConnectRetryCount=1;ConnectRetryInterval=10;Column Encryption Setting=Disabled
[Forced due to logging gap, Original Level: Verbose] SPApplicationAuthenticationModule: IsAppAllowedEndPoint returned true because request endpoint matches:{0}
SPAudienceValidator: Matching against freshly-fetched realm: b5f65919-e6d8-495e-96e0-3e1e1761688b.
Updating X.509 certificate validation policy
Adding X.509 certificate thumbprint '72ABFF7D221D595491E587A36B60F0E6DFB04EAF' to root authority trust
Adding X.509 certificate thumbprint '72ABFF7D221D595491E587A36B60F0E6DFB04EAF' to root authority trust
Adding X.509 certificate thumbprint '72ABFF7D221D595491E587A36B60F0E6DFB04EAF' to root authority trust
Adding X.509 certificate thumbprint '72ABFF7D221D595491E587A36B60F0E6DFB04EAF' to root authority trust
Ims::EndPoints: old: net.tcp://srvsp2013/D3D958/QueryProcessingComponent1/ImsQueryInternal;, new: net.tcp://srvsp2013/D3D958/QueryProcessingComponent1/ImsQueryInternal;
Adding X.509 certificate thumbprint '1DF3E4062801C5F25868EF851D850BE79BC8E886' to root authority trust
Adding X.509 certificate thumbprint 'A5AA8118F05242B1C03BD51701D7EA682DD4E792' to root authority trust
[Forced due to logging gap, cached @ 04/08/2019 09:43:01.81, Original Level: Verbose] SPJsonWebSecurityBaseTokenHandler: Issuer name in token '{0}' matches the registered issuer name for trusted sts '{1}'.
[Forced due to logging gap, Original Level: VerboseEx] Reverting to process identity
SPJsonWebSecurityBaseTokenHandler: ValidateActorIsSelfIssuer! Issuer 'RER' is not self issuer.
Leaving Monitored Scope (Verifying Token). Execution Time=211.4962
Entering monitored scope (Getting Site Subscription Id). Parent [Marketplace] Getting token from STS and setting Thread Identity
Leaving Monitored Scope (Getting Site Subscription Id). Execution Time=1.7977
Entering monitored scope (Reading token from Cache using token signature). Parent [Marketplace] Getting token from STS and setting Thread Identity
Token Cache: Failed to get token from distributed cache for 'b56t8pvi2gxym8-3ielibr4ysoywf1i8jxdj5e-vh0xxchmppwcvgslqhtmjvuwspmj4ge_rymo7v2lc9v2ozda74mvygtc-uncvqg901mv0ndbn_hldct5vhsubx2psdnqbxfkd0z7qhlhbvlywag_qdda1ffryqzls_bo90kya4zsagvu9atvamnrua5ohvvq7i05lo8vkz3zdigksbwhodc4igxhlfkkljl1aqmdewtxsh8ef73ozc9-ajoanlr3jz3-k4ngfwk7lcfvst5aphii4lj8g53qsb0lywj3f2p70oxzzooom_e1df_-l_aeaxz3rddg-rx1823qfrw'.(This is expected during the process warm up or if data cache Initialization is getting done by some other thread).
Token Cache: Reverting to local cache to get the token for 'b56t8pvi2gxym8-3ielibr4ysoywf1i8jxdj5e-vh0xxchmppwcvgslqhtmjvuwspmj4ge_rymo7v2lc9v2ozda74mvygtc-uncvqg901mv0ndbn_hldct5vhsubx2psdnqbxfkd0z7qhlhbvlywag_qdda1ffryqzls_bo90kya4zsagvu9atvamnrua5ohvvq7i05lo8vkz3zdigksbwhodc4igxhlfkkljl1aqmdewtxsh8ef73ozc9-ajoanlr3jz3-k4ngfwk7lcfvst5aphii4lj8g53qsb0lywj3f2p70oxzzooom_e1df_-l_aeaxz3rddg-rx1823qfrw'.
SPReaderWriterLock named [Local Token Cache] held for 16 milliseconds. Call stack: (enable Verbose for stack trace)
Leaving Monitored Scope (Reading token from Cache using token signature). Execution Time=9.2888
[Forced due to logging gap, cached @ 04/08/2019 09:43:01.89, Original Level: Verbose] SPApplicationAuthenticationModule: OAuth request has to be either User or User+App to try to use user token cache. Current request type:{0}.
[Forced due to logging gap, Original Level: VerboseEx] Reverting to process identity
Unable to update the value of a system performance counter.  The following exception was thrown: System.Runtime.InteropServices.COMException (0x800703FA): Retrieving the COM class factory for component with CLSID {BDEADF26-C265-11D0-BCED-00A0C90AB50F} failed due to the following error: 800703fa Illegal operation attempted on a registry key that has been marked for deletion. (Exception from HRESULT: 0x800703FA).     at Microsoft.SharePoint.Library.SPRequest..ctor()     at Microsoft.SharePoint.SPGlobal.CreateSPRequestAndSetIdentity(SPSite site, String name, Boolean bNotGlobalAdminCode, String strUrl, Boolean bNotAddToContext, Byte[] UserToken, SPAppPrincipalToken appPrincipalToken, String userName, Boolean bIgnoreTokenTimeout, Boolean bAsAnonymous)     at Microsoft.SharePoint.SPRequestManager.GetContextRequest(SPRequestAuthenticationMode authenticationMode)     at Microsoft.SharePoint.Administration.SPFarm.get_RequestAny()     at Microsoft.SharePoint.Utilities.SPPerformanceCounterAgent.UpdateSharePointPerfmonCounters()
[Forced due to logging gap, cached @ 04/08/2019 09:43:02.31, Original Level: Verbose] Completed deserializing the type named {0} and with id {1}.
[Forced due to logging gap, Original Level: Verbose] SPSecurityContext: Added JsonWebSecurityTokenHandler to trust channel factory
[Forced due to logging gap, cached @ 04/08/2019 09:43:02.52, Original Level: Verbose] SPSecurityContext: The SecurityTokenServiceBehavior is attached to the TrustChannel.
SecurityTokenServiceSendRequest: RemoteAddress: 'http://localhost:32843/SecurityTokenServiceApplication/securitytoken.svc' Channel: 'Microsoft.IdentityModel.Protocols.WSTrust.IWSTrustChannelContract' Action: 'http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue' MessageId: 'urn:uuid:dc5b5efa-5214-42f8-a6db-bd573714ff44'
[Forced due to logging gap, cached @ 04/08/2019 09:43:02.97, Original Level: Verbose] The SecurityTokenServiceHeaderInfo including the correlation ID was added.
[Forced due to logging gap, Original Level: Verbose] SPRequestSecurityTokenSerializer: {0} is a custom element name, invoking SPRequestToken.Serialize.
SecurityTokenServiceReceiveRequest: LocalAddress: 'http://srvsp2013.contoso.nl:32843/SecurityTokenServiceApplication/securitytoken.svc' Channel: 'System.ServiceModel.Channels.ServiceChannel' Action: 'http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue' MessageId: 'urn:uuid:dc5b5efa-5214-42f8-a6db-bd573714ff44'
Entering monitored scope (ExecuteSecurityTokenServiceOperationServer). Parent No
SPJsonWebSecurityBaseTokenHandler: ValidateActorIsSelfIssuer! Issuer 'RER' is not self issuer.
Trusted provider is missing. Provider: '00000003-0000-0ff1-ce00-000000000000'
STS Call Claims Saml: Successfully requested oauth claim identity.
Leaving Monitored Scope (ExecuteSecurityTokenServiceOperationServer). Execution Time=19.2988
[Forced due to logging gap, cached @ 04/08/2019 09:43:03.27, Original Level: Verbose] SPRequestSecurityToken: SerializeProperty() serializing elementname:{0}, with value:{1}.
Leaving Monitored Scope (ExecuteSecurityTokenServiceOperationCaller:http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue). Execution Time=443.6135
Unable to update the value of a system performance counter.  The following exception was thrown: System.Runtime.InteropServices.COMException (0x800703FA): Retrieving the COM class factory for component with CLSID {BDEADF26-C265-11D0-BCED-00A0C90AB50F} failed due to the following error: 800703fa Illegal operation attempted on a registry key that has been marked for deletion. (Exception from HRESULT: 0x800703FA).     at Microsoft.SharePoint.Library.SPRequest..ctor()     at Microsoft.SharePoint.SPGlobal.CreateSPRequestAndSetIdentity(SPSite site, String name, Boolean bNotGlobalAdminCode, String strUrl, Boolean bNotAddToContext, Byte[] UserToken, SPAppPrincipalToken appPrincipalToken, String userName, Boolean bIgnoreTokenTimeout, Boolean bAsAnonymous)     at Microsoft.SharePoint.SPRequestManager.GetContextRequest(SPRequestAuthenticationMode authenticationMode)     at Microsoft.SharePoint.Administration.SPFarm.get_RequestAny()     at Microsoft.SharePoint.Utilities.SPPerformanceCounterAgent.UpdateSharePointPerfmonCounters()
[Forced due to logging gap, cached @ 04/08/2019 09:43:03.42, Original Level: Verbose] ____{0}={1}
[Forced due to logging gap, Original Level: Verbose] SPApplicationAuthenticationModule: Calling Authenticate User
[Forced due to logging gap, Original Level: VerboseEx] SPAudienceValidator: Audience validation succeeded. AudienceUri: '{0}'.
[Forced due to logging gap, cached @ 04/08/2019 09:43:03.83, Original Level: VerboseEx] SPSam.SetPrincipalFromSessionToken: Start
[Forced due to logging gap, Original Level: VerboseEx] SPSam.SetPrincipalFromSessionToken: End
Token Cache: Failed to add token from distributed cache for 'b56t8pvi2gxym8-3ielibr4ysoywf1i8jxdj5e-vh0xxchmppwcvgslqhtmjvuwspmj4ge_rymo7v2lc9v2ozda74mvygtc-uncvqg901mv0ndbn_hldct5vhsubx2psdnqbxfkd0z7qhlhbvlywag_qdda1ffryqzls_bo90kya4zsagvu9atvamnrua5ohvvq7i05lo8vkz3zdigksbwhodc4igxhlfkkljl1aqmdewtxsh8ef73ozc9-ajoanlr3jz3-k4ngfwk7lcfvst5aphii4lj8g53qsb0lywj3f2p70oxzzooom_e1df_-l_aeaxz3rddg-rx1823qfrw'.(This is expected during the process warm up or if data cache Initialization is getting done by some other thread).
Token Cache: Reverting to local cache to Add the token for 'b56t8pvi2gxym8-3ielibr4ysoywf1i8jxdj5e-vh0xxchmppwcvgslqhtmjvuwspmj4ge_rymo7v2lc9v2ozda74mvygtc-uncvqg901mv0ndbn_hldct5vhsubx2psdnqbxfkd0z7qhlhbvlywag_qdda1ffryqzls_bo90kya4zsagvu9atvamnrua5ohvvq7i05lo8vkz3zdigksbwhodc4igxhlfkkljl1aqmdewtxsh8ef73ozc9-ajoanlr3jz3-k4ngfwk7lcfvst5aphii4lj8g53qsb0lywj3f2p70oxzzooom_e1df_-l_aeaxz3rddg-rx1823qfrw'.
Leaving Monitored Scope ([Marketplace] Getting token from STS and setting Thread Identity). Execution Time=1979.0577
SPApplicationAuthenticationModule Authentication finished successfully for user:0i.t|00000003-0000-0ff1-ce00-000000000000|app@sharepoint and actor:0i.t|ms.sp.ext|00000003-0000-0ff1-ce00-000000000000@b5f65919-e6d8-495e-96e0-3e1e1761688b
Leaving Monitored Scope (Application Authentication Pipeline). Execution Time=2249.2119
OAuth app principal Name=i:0i.t|ms.sp.ext|00000003-0000-0ff1-ce00-000000000000@b5f65919-e6d8-495e-96e0-3e1e1761688b, IsAppOnlyRequest=True, UserIdentityName=0i.t|00000003-0000-0ff1-ce00-000000000000|app@sharepoint, ClaimsCount=11
Do not apply UserResourceTally for app only request.
[Forced due to logging gap, cached @ 04/08/2019 09:43:03.91, Original Level: Verbose] SQL connection time: 0.0967 for Data Source=MDSO;Initial Catalog=SHPOSYS5_Config;Integrated Security=True;Persist Security Info=False;Enlist=False;Pooling=True;Min Pool Size=0;Max Pool Size=100;PoolBlockingPeriod=Auto;Asynchronous Processing=False;Connection Reset=True;MultipleActiveResultSets=False;Replication=False;Connect Timeout=15;Encrypt=False;TrustServerCertificate=False;Load Balance Timeout=0;Packet Size=8000;Type System Version=Latest;Application Name=".Net SqlClient Data Provider";User Instance=False;Context Connection=False;Transaction Binding="Implicit Unbind";ApplicationIntent=ReadWrite;MultiSubnetFailover=False;TransparentNetworkIPResolution=True;ConnectRetryCount=1;ConnectRetryInterval=10;Column Encryption Setting=Disabled
[Forced due to logging gap, Original Level: Verbose] Service at {0} implemented interface IServiceFactoryUsingAuthSchemeInEndpointAddress: {1}
Leaving Monitored Scope (PostAuthenticateRequestHandler). Execution Time=48.6289
Unable to update the value of a system performance counter.  The following exception was thrown: System.Runtime.InteropServices.COMException (0x800703FA): Retrieving the COM class factory for component with CLSID {BDEADF26-C265-11D0-BCED-00A0C90AB50F} failed due to the following error: 800703fa Illegal operation attempted on a registry key that has been marked for deletion. (Exception from HRESULT: 0x800703FA).     at Microsoft.SharePoint.Library.SPRequest..ctor()     at Microsoft.SharePoint.SPGlobal.CreateSPRequestAndSetIdentity(SPSite site, String name, Boolean bNotGlobalAdminCode, String strUrl, Boolean bNotAddToContext, Byte[] UserToken, SPAppPrincipalToken appPrincipalToken, String userName, Boolean bIgnoreTokenTimeout, Boolean bAsAnonymous)     at Microsoft.SharePoint.SPRequestManager.GetContextRequest(SPRequestAuthenticationMode authenticationMode)     at Microsoft.SharePoint.Administration.SPFarm.get_RequestAny()     at Microsoft.SharePoint.Utilities.SPPerformanceCounterAgent.UpdateSharePointPerfmonCounters()
[Forced due to logging gap, cached @ 04/08/2019 09:43:03.94, Original Level: Verbose] SPRequestModule.PreRequestExecuteAppHandler
[Forced due to logging gap, Original Level: Verbose] Creating binding for service {0} and endpoint at {1}.
Leaving Monitored Scope (Performance Inspect Scope). Execution Time=309.827
[Forced due to logging gap, cached @ 04/08/2019 09:43:04.71, Original Level: Verbose] Cannot find configuration for service {0}
The context uri in ConfigServiceHostIfClaimsAuth is http://localhost:80/_vti_bin/client.svc/ProcessQuery
Entering monitored scope (Timer Job MySite-Second-Instantiation-Interactive-Request-Queue). Parent No
Name=Timer Job MySite-Second-Instantiation-Interactive-Request-Queue
<LogTimerJobInstance> Starting timer My Site Second Instantiation Interactive Request Queue (28cae970-9721-4876-8dfb-e5c049c4a030) for web application: SharePoint - CCP. Function: MySiteInstantiationJob:Execute
Entering monitored scope (Timer Job Health Statistics Updating). Parent No
Name=Timer Job Health Statistics Updating
<LogTimerJobInstance> Finishing on timer My Site Second Instantiation Interactive Request Queue (28cae970-9721-4876-8dfb-e5c049c4a030) for web application: SharePoint - CCP.  Function: MySiteInstantiationJob:Execute
Leaving Monitored Scope (Timer Job MySite-Second-Instantiation-Interactive-Request-Queue). Execution Time=2.3865
Updating SPPersistedObject SearchServiceApplicationMonitoring Name=Monitoring_7F19A5D194F942e6A9856FCFD6EE6F63. Version: 1613291 Ensure: False, HashCode: 5105880, Id: ca08af94-34d1-43a8-a13a-bbc8cff40583, Stack:    at Microsoft.Office.Server.Search.Monitoring.TraceDiagnosticsProvider.UpdateServiceApplicationHealthStats()     at Microsoft.SharePoint.Administration.SPTimerJobInvokeInternal.Invoke(SPJobDefinition jd, Guid targetInstanceId, Boolean isTimerService, Int32& result)     at Microsoft.SharePoint.Administration.SPTimerJobInvoke.Invoke(TimerJobExecuteData& data, Int32& result)
Leaving Monitored Scope (Timer Job Health Statistics Updating). Execution Time=55.6327
Unable to update the value of a system performance counter.  The following exception was thrown: System.Runtime.InteropServices.COMException (0x800703FA): Retrieving the COM class factory for component with CLSID {BDEADF26-C265-11D0-BCED-00A0C90AB50F} failed due to the following error: 800703fa Illegal operation attempted on a registry key that has been marked for deletion. (Exception from HRESULT: 0x800703FA).     at Microsoft.SharePoint.Library.SPRequest..ctor()     at Microsoft.SharePoint.SPGlobal.CreateSPRequestAndSetIdentity(SPSite site, String name, Boolean bNotGlobalAdminCode, String strUrl, Boolean bNotAddToContext, Byte[] UserToken, SPAppPrincipalToken appPrincipalToken, String userName, Boolean bIgnoreTokenTimeout, Boolean bAsAnonymous)     at Microsoft.SharePoint.SPRequestManager.GetContextRequest(SPRequestAuthenticationMode authenticationMode)     at Microsoft.SharePoint.Administration.SPFarm.get_RequestAny()     at Microsoft.SharePoint.Utilities.SPPerformanceCounterAgent.UpdateSharePointPerfmonCounters()
[Forced due to logging gap, Original Level: Verbose] Set diagnostics context correlationid {0}, trace level {1}, isDevdashboardenabled {2}
[Forced due to logging gap, Original Level: Verbose] Processing CSOM queries
Begin CSOM Request ManagedThreadId=49, NativeThreadId=8600
[Forced due to logging gap, cached @ 04/08/2019 09:43:05.70, Original Level: Verbose] SPSecurityTokenServiceManagerExtensions!GetProviderByName: Returning Local Issuer for input {0}
[Forced due to logging gap, Original Level: VerboseEx] Reverting to process identity
Trusted provider is missing. Provider: '00000003-0000-0ff1-ce00-000000000000'
Trusted provider is missing. Provider: '00000003-0000-0ff1-ce00-000000000000'
Trusted provider is missing. Provider: '00000003-0000-0ff1-ce00-000000000000'
Site=/
Trusted provider is missing. Provider: '00000003-0000-0ff1-ce00-000000000000'
Trusted provider is missing. Provider: '00000003-0000-0ff1-ce00-000000000000'

You can see my trusted root authority RER is checked. But then I see

OAuth app principal Name=i:0i.t|ms.sp.ext|00000003-0000-0ff1-ce00-000000000000@b5f65919-e6d8-495e-96e0-3e1e1761688b

My app uses clientid: "bfeae944-65cb-4335-9ce4-7c024183c465"

So I was expecting

OAuth app principal Name=i:0i.t|ms.sp.ext|bfeae944-65cb-4335-9ce4-7c024183c465@b5f65919-e6d8-495e-96e0-3e1e1761688b

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.