Question

当我从我的代码中访问我的唱歌网址（https://abcd.avcd.ac/adfs/ls/IdpInitiatedSignOn.aspx）以建立与adfs的关联时，我收到错误消息：

A WS-Trust endpoint that was configured could not be opened. 

Additional Data 
Address: https://win-3723jtvfe02.abcd.avcd.ac/adfs/services/trust/2005/windowstransport 
Mode:    WindowsTransport 

Error: 
MSIS0006: A Service Principal Name is not registered for the AD FS service account.

我也会收到警告：

The SSL certificate does not contain all UPN suffix values that exist in the enterprise. 
Users with UPN suffix values not represented in the certificate will not be able to Workplace-Join their devices.

请帮我解决这个问题。

Answer 1

对于SPN问题，您需要注册。这里有关于technet的一篇很好的文章：http://social.technet.microsoft.com/wiki/contents/articles/1427.ad-fs-2-0-how-to-configure-the-spn-serviceprincipalname-for-the-service-account.aspx

如果您未使用ADFS 2012 R2的Workplace-Join功能，那么您不必担心其他错误。但是，如果您确实希望解决此问题，请查看此处的文档：https://technet.microsoft.com/en-us/library/dn614658.aspx

ADFS：在Windows Server 2012上建立SSO连接时出错

1 个答案: