0

I am trying to configure a web application in a SharePoint environment to use ADFS as a login provider.

I have followed the steps in this TechNet blog post and it all seemed to go well until I try to actually log in using ADFS.

When I navigate to the web application, I am presented with a dropdown to select the credential type. I select ADFS and am sent to the ADFS login page. I enter the correct credentials and am then sent to https://WEB_APPLICATION_HOSTNAME/_trust, and this page displays an ASP.NET yellow screen of death with:

Specified method is not supported.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.ServiceModel.FaultException`1[[System.ServiceModel.ExceptionDetail, System.ServiceModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]: Specified method is not supported.

Source Error:

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

Stack Trace:


[FaultException`1: Specified method is not supported.]
   Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.ReadResponse(Message response) +249
   Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.Issue(RequestSecurityToken rst, RequestSecurityTokenResponse& rstr) +83
   Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.Issue(RequestSecurityToken rst) +33
   Microsoft.SharePoint.SPSecurityContext.SecurityTokenForContext(Uri context, Boolean bearerToken, SecurityToken onBehalfOf, SecurityToken actAs, SecurityToken delegateTo, SPRequestSecurityTokenProperties properties) +1103
   Microsoft.SharePoint.SPSecurityContext.SecurityTokenForOnBehalfOfContext(Uri context, SecurityToken onBehalfOf) +72
   Microsoft.SharePoint.IdentityModel.SPFederationAuthenticationModule.ExchangeArgumentTrustedThirdPartySessionSecurityTokenForLocalToken(SecurityToken thirdPartyToken, SessionSecurityTokenCreatedEventArgs arguments) +1859
   Microsoft.SharePoint.IdentityModel.SPFederationAuthenticationModule.OnSessionSecurityTokenCreated(SessionSecurityTokenCreatedEventArgs eventArgs) +590
   Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.SetPrincipalAndWriteSessionToken(SessionSecurityToken sessionToken, Boolean isSession) +90
   Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.SignInWithResponseMessage(HttpRequest request) +701
   Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.OnAuthenticateRequest(Object sender, EventArgs args) +323
   Microsoft.SharePoint.IdentityModel.SPFederationAuthenticationModule.OnAuthenticateRequest(Object sender, EventArgs eventArgs) +138
   System.Web.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +215
   System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +97

From the appearance of the error, it looks like SharePoint is internally sending a request to the security token service and the latter is responding saying that it's using an invalid SOAP method, but that is just a guess.

I have tried the steps from this Fiddler blog to try to route these requests through Fiddler, but Fiddler doesn't capture anything.

Google searches for this situation aren't turning up anything remotely resembling my situation. What can I do to begin troubleshooting this?

Below are the ULS logs from the request to the _trust endpoint. Of note, the first line gives me some concern. The Uri here is the URN I added in step 7 of following the TechNet blog post, but it seems to be resulting in some sort of error.

SharePoint Foundation   General                 adyrv   High        Cannot find site lookup info for request Uri urn:*******.
SharePoint Foundation   Claims Authentication   amb82   Unexpected  Couldn't find a proper match for user email. User: '********************'.
SharePoint Foundation   Claims Authentication   8307    Critical    An exception occurred in ADFS claim provider when calling SPClaimProvider.FillUserKeyForEntity(): Specified method is not supported..
SharePoint Foundation   Monitoring              b4ly    High        Leaving Monitored Scope (SPClaimProvider.FillUserKeyForEntity()). Execution Time=120.4741
SharePoint Foundation   Claims Authentication   af3zp   Unexpected  STS Call Claims Saml: Problem getting output claims identity. Exception: 'System.NotSupportedException: Specified method is not supported.     at Microsoft.SharePoint.Administration.Claims.SPTrustedBackedByActiveDirectoryClaimProvider.GetUserKeyForEntity(SPClaim entity)     at Microsoft.SharePoint.Administration.Claims.SPClaimProvider.UserKeyForEntity(SPClaim entity)     at Microsoft.SharePoint.Administration.Claims.SPClaimProviderManager.GetProviderUserKeyClaimForTrustedUser(IClaimsIdentity claimsIdentity, SPClaim userIdentityClaim)     at Microsoft.SharePoint.Administration.Claims.SPClaimProviderManager.GetProviderUserKeyClaim(IClaimsIdentity claimsIdentity, SPClaim loginClaim)     at Microsoft.SharePoint.Administration.Claims.SPClaimProviderManager.GetProviderUserKey(IClaimsIdentity claimsIdentity, String encodedIdentityClaimSuffix)     at Microsoft.SharePoint.IdentityModel.SPSessionSecurityTokenCookieValue.Initialize(IClaimsIdentity identity, RequestSecurityToken request, DateTime tokenLifeTime)     at Microsoft.SharePoint.IdentityModel.SPSecurityTokenService.CreateTokenCacheReferenceFromUserId(SPRequestInfo requestInfo, IClaimsIdentity identity)     at Microsoft.SharePoint.IdentityModel.SPSecurityTokenService.AugmentTokenCacheReferenceClaim(SPRequestInfo requestInfo, IClaimsIdentity identity)     at Microsoft.SharePoint.IdentityModel.SPSecurityTokenService.AugmentOutputIdentityForRequest(SPRequestInfo requestInfo, IClaimsIdentity outputIdentity)     at Microsoft.SharePoint.IdentityModel.SPSecurityTokenService.GetOutputClaimsIdentity(IClaimsPrincipal principal, RequestSecurityToken request, Scope scope)'.
SharePoint Foundation   Monitoring              b4ly    High        Leaving Monitored Scope (SPSecurityTokenService.GetOutputClaimsIdentity()). Execution Time=121.9425
SharePoint Foundation   Claims Authentication   fo1t    Monitorable STS Call: Failed to issue new security token. Exception: System.NotSupportedException: Specified method is not supported.     at Microsoft.SharePoint.Administration.Claims.SPTrustedBackedByActiveDirectoryClaimProvider.GetUserKeyForEntity(SPClaim entity)     at Microsoft.SharePoint.Administration.Claims.SPClaimProvider.UserKeyForEntity(SPClaim entity)     at Microsoft.SharePoint.Administration.Claims.SPClaimProviderManager.GetProviderUserKeyClaimForTrustedUser(IClaimsIdentity claimsIdentity, SPClaim userIdentityClaim)     at Microsoft.SharePoint.Administration.Claims.SPClaimProviderManager.GetProviderUserKeyClaim(IClaimsIdentity claimsIdentity, SPClaim loginClaim)     at Microsoft.SharePoint.Administration.Claims.SPClaimProviderManager.GetProviderUserKey(IClaimsIdentity claimsIdentity, String encodedIdentityClaimSuffix)     at Microsoft.SharePoint.IdentityModel.SPSessionSecurityTokenCookieValue.Initialize(IClaimsIdentity identity, RequestSecurityToken request, DateTime tokenLifeTime)     at Microsoft.SharePoint.IdentityModel.SPSecurityTokenService.CreateTokenCacheReferenceFromUserId(SPRequestInfo requestInfo, IClaimsIdentity identity)     at Microsoft.SharePoint.IdentityModel.SPSecurityTokenService.AugmentTokenCacheReferenceClaim(SPRequestInfo requestInfo, IClaimsIdentity identity)     at Microsoft.SharePoint.IdentityModel.SPSecurityTokenService.AugmentOutputIdentityForRequest(SPRequestInfo requestInfo, IClaimsIdentity outputIdentity)     at Microsoft.SharePoint.IdentityModel.SPSecurityTokenService.GetOutputClaimsIdentity(IClaimsPrincipal principal, RequestSecurityToken request, Scope scope)     at Microsoft.IdentityModel.SecurityTokenService.SecurityTokenService.Issue(IClaimsPrincipal principal, RequestSecurityToken request)     at Microsoft.SharePoint.IdentityModel.SPSecurityTokenService.Issue(IClaimsPrincipal principal, RequestSecurityToken request)
SharePoint Foundation   Monitoring              b4ly    High        Leaving Monitored Scope (SPSecurityTokenService.Issue). Execution Time=125.8951
SharePoint Foundation   Topology                aeayc   High        [Forced due to logging gap, cached @ 11/14/2019 01:19:26.79, Original Level: Verbose] The SecurityTokenServiceHeaderInfo including the correlation ID was added.
SharePoint Foundation   Monitoring              b4ly    High        Leaving Monitored Scope (ExecuteSecurityTokenServiceOperationCaller:http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue). Execution Time=141.6527
SharePoint Foundation   Claims Authentication   fsq7    High        SPSecurityContext: Request for security token failed with exception: System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]: Specified method is not supported. (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is: System.NotSupportedException: Specified method is not supported.    at Microsoft.SharePoint.Administration.Claims.SPTrustedBackedByActiveDirectoryClaimProvider.GetUserKeyForEntity(SPClaim entity)     at Microsoft.SharePoint.Administration.Claims.SPClaimProvider.UserKeyForEntity(SPClaim entity)     at Microsoft.SharePoint.Administration.Claims.SPClaimProviderManager.GetProviderUserKeyClaimForTrustedUser(IClaimsIdentity claimsIdentity, SPClaim userIdentityClaim)     at Microsoft.SharePoint.Administration.Claims.SPClaimProviderManager.GetProviderUserKeyClaim(IClaimsIdentity claimsIdentity, SPClaim loginClaim)     at Microsoft.SharePoint.Administration.Claims.SPClaimProviderManager.GetProviderUserKey(IClaimsIdentity claimsIdentity, String encodedIdentityClaimSuffix)     at Microsoft.SharePoint.IdentityModel.SPSessionSecurityTokenCookieValue.Initialize(IClaimsIdentity identity, RequestSecurityToken request, DateTime token...).
SharePoint Foundation   Claims Authentication   8306    Critical    An exception occurred when trying to issue security token: Specified method is not supported..
SharePoint Foundation   Claims Authentication   af3xx   Unexpected  Claims Saml Sign-In: Could not get local token for trusted third party token. FaultException: 'System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]: Specified method is not supported. (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is: System.NotSupportedException: Specified method is not supported.    at Microsoft.SharePoint.Administration.Claims.SPTrustedBackedByActiveDirectoryClaimProvider.GetUserKeyForEntity(SPClaim entity)     at Microsoft.SharePoint.Administration.Claims.SPClaimProvider.UserKeyForEntity(SPClaim entity)     at Microsoft.SharePoint.Administration.Claims.SPClaimProviderManager.GetProviderUserKeyClaimForTrustedUser(IClaimsIdentity claimsIdentity, SPClaim userIdentityClaim)     at Microsoft.SharePoint.Administration.Claims.SPClaimProviderManager.GetProviderUserKeyClaim(IClaimsIdentity claimsIdentity, SPClaim loginClaim)     at Microsoft.SharePoint.Administration.Claims.SPClaimProviderManager.GetProviderUserKey(IClaimsIdentity claimsIdentity, String encodedIdentityClaimSuffix)     at Microsoft.SharePoint.IdentityModel.SPSessionSecurityTokenCookieValue.Initialize(IClaimsIdentity identity, RequestSecurityToken request, DateTime token...).'. Stack: '   at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.ReadResponse(Message response)     at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.Issue(RequestSecurityToken rst, RequestSecurityTokenResponse& rstr)     at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.Issue(RequestSecurityToken rst)     at Microsoft.SharePoint.SPSecurityContext.SecurityTokenForContext(Uri context, Boolean bearerToken, SecurityToken onBehalfOf, SecurityToken actAs, SecurityToken delegateTo, SPRequestSecurityTokenProperties properties)     at Microsoft.SharePoint.SPSecurityContext.SecurityTokenForOnBehalfOfContext(Uri context, SecurityToken onBehalfOf)     at Microsoft.SharePoint.IdentityModel.SPFederationAuthenticationModule.ExchangeArgumentTrustedThirdPartySessionSecurityTokenForLocalToken(SecurityToken thirdPartyToken, SessionSecurityTokenCreatedEventArgs arguments)'.
SharePoint Foundation   Monitoring              b4ly    High        Leaving Monitored Scope (SPFederationAuthenticationModule.OnSessionSecurityTokenCreated). Execution Time=143.4391
SharePoint Foundation   Monitoring              b4ly    High        Leaving Monitored Scope (SPFederationAuthenticationModule.OnAuthenticateRequest::WifCodeCall). Execution Time=161.2515
SharePoint Foundation   Micro Trace             uls4    High        Micro Trace Tags: 0 adyrv,143 b4ly,0 fsq7,0 af3xx,0 b4ly,0 b4ly

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.