Event ID 609 — Federation Service Malformed Requests
Applies To: Windows Server 2008 R2
.jpg)
Federation Service Malformed Requests logs information about incorrectly configured or missing data values that reside in the trust policy, along with information about client cookie issues and sign-on issues.
Event Details
| Product: | Windows Operating System |
| ID: | 609 |
| Source: | Microsoft-Windows-ADFS |
| Version: | 6.1 |
| Symbolic Name: | UnrecognizedTrustingRealmLong |
| Message: | A token request was received for a resource partner with the Uniform Resource Identifier (URI) '%1', but the request could not be fulfilled because the URI does not identify any known resource partner. URI: %1 This request will be failed. User Action If this URI should be handled, verify that it matches the URI for the resource partner in the Federation Service trust policy. URI matching rules differ according to the URI scheme, but in general URIs are case sensitive. Additional Data Refer to Request for Comments (RFC) 2396 for more information about URIs. |
Resolve
Examine the URI for the resource partner
If this Uniform Resource Identifier (URI) should be handled, check that it matches the URI for the resource partner in the trust policy. URI matching rules differ according to the URI scheme, but, in general, URIs are case sensitive.
To perform this procedure, you must be a member of the local Administrators group, or you must have been delegated the appropriate authority.
To check the URI of a resource partner:
- Click Start, point to Administrative Tools, and then click Active Directory Federation Services.
- Double-click Federation Service, double-click Trust Policy, double-click Partner Organizations, and then double-click Resource Partners.
- Right-click the resource partner, and then click Properties.
- On the General tab, locate the Federation Service URI field, and then check the URI value.
For more information about URIs, see Request for Comments (RFC) 2396 (https://go.microsoft.com/fwlink/?LinkId=29138).
Verify
Verify that you can access the Active Directory Federation Services (AD FS)-enabled application from a client browser and that the resource can be accessed with the appropriate authorization.