Error message after you run the MOSDAL Support Toolkit: "There was an exception error during a login attempt"

After you run the Microsoft Online Services Diagnostics and Logging (MOSDAL) Support Toolkit, the Active Directory Federation Services (AD FS) diagnostics log contains the following error message:Note The AD FS diagnostics log is located here: In addition, you may notice the following behavior when you sign in to Office 365 resources by using single sign-on (SSO)-enabled user ID credentials:

This issue may occur if one of the following conditions is true:

• Service problems with AD FS limit access.
• Problems exposing AD FS to the Internet through reverse proxy limit access.
• Secure Sockets Layer (SSL) certificate problems occur with the AD FS service.
• The ls�service endpoint may be disabled in the on-premises AD FS Federation service.
• Kerberos problems with AD FS limit AD FS logon.
• AD FS service errors limit AD FS logon.

To resolve this issue, use one of the following methods, as appropriate for your situation.

Method 1: Troubleshoot AD FS connectivity

Use the following Microsoft Knowledge Base article to troubleshoot AD FS service problems that might limit connectivity:

Method 2: Troubleshoot AD FS Proxy server functionality

If sign-in problems that are described earlier only occur when you are connected to AD FS from outside the on-premises network, use the following Microsoft Knowledge Base article to troubleshoot AD FS Proxy service problems that might limit connectivity:

Method 3: Troubleshoot AD FS SSL certificate problems

If a sign-in attempt to Office 365 web services results in a certificate warning from the AD FS server, use the following Microsoft Knowledge Base article to troubleshoot SSL certificate problems:

Method 4: Reset the AD FS service endpoints to the default configuration

To make sure that the AD FS service endpoint configuration metadata is updated to the Windows Azure Active Directoroy (Windows Azure AD) authentication system, use the "How to update the configuration of the Office 365 federated domain" section of the following Microsoft Knowledge Base article:

Method 5: Troubleshoot Kerberos authentication problems with AD FS

To diagnose and resolve Kerberos authentication problems with AD FS, use the following Microsoft Knowledge Base article:

Method 6: AD FS service problems limit sign-in

To diagnose and resolve common AD FS service problems that limit authentication, use the following Microsoft Knowledge Base article:

Still need help? Go to the Office 365 Community�website or�the�Windows Azure Active Directory Forums website.