Home » Microsoft » 70-346 v.2 » What should you do?
An organization implements single sign-on (SSO) for use with Office 365 services. You install an Active Directory Federation Services (AD FS) proxy server.
Users report that they are unable to authenticate. You launch the Event Viewer and view the event information shown in the following screen shot:
You need to ensure that users can authenticate to Office 365. What should you do?
A. Re-enter the credentials used to establish the trust.
B. Verify the federation server proxy is trusted by the federation service.
C. Re-install the Secure Sockets Layer (SSL) certificate for the federation service.
D. Verify network connectivity between the Federation Service Proxy and federation server.
Correct Answer: A
Explanation/Reference:
The exhibit indicates that the federation server proxy could not establish a trust with the Federation Service. Possible causes for this problem are: The credentials that are used to establish the trust between the federation server proxy and the Federation Service are not valid, or the Federation Service cannot be reached.
The federation server proxy trust was revoked.
The federationserver proxy has been inactive for a long period of time (such as 30 days or more).
Possible solutions are:
Ensure that thecredentials that are being used to establish a trust between the federation server proxy and the Federation Service are valid, andthat the Federation Service can be reached.
Run the AD FS 2.0 Proxy Configuration Wizard again to renew trust with the Federation Service.
