Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. Error message after you run the MOSDAL Support Toolkit: "The Windows Integrated Authentication endpoint is missing from the Metadata Exchange (MEX) document that is published by the federation server"

Error message after you run the MOSDAL Support Toolkit: "The Windows Integrated Authentication endpoint is missing from the Metadata Exchange (MEX) document that is published by the federation server"

Problem

After you run the Microsoft Online Services Diagnostics and Logging (MOSDAL) Support Toolkit, the Active Directory Federation Services (AD FS) diagnostics log contains the following error message:

The Windows Integrated Authentication endpoint is missing from the Metadata Exchange (MEX) document that is published by the federation server.

Note The AD FS diagnostics log located here:
\Admin_Applications\SSO_Diagnostic_Tests\ADFSDiagnostic.txt
In addition, you may notice the following behavior when you sign in to Office 365 resources by using single sign-on (SSO)-enabled user ID credentials:
Rich client application authentication fails when it tries to access services from an on-premises Active Directory Domain Services-connected client computer.

↑ Back to the top

Cause

This issue may occur if the windowstransport and usernamemixed service endpoints are disabled in the on-premises AD FS Federation service.

↑ Back to the top

Solution

To resolve this issue, make sure that the AD FS service endpoints are�set to support SSO authentication. For more information about how to do this, see the following Microsoft Knowledge Base article: �
2712957�SSO authentication to Office 365 fails after you change AD FS service endpoint settings in the AD FS Management Console �
After you update the service endpoints, make sure that the AD FS service endpoint configuration metadata is updated to the Windows Azure Active Directory (Windows Azure AD) authentication system. For more information about how to do this, see the "How to update the configuration of the Office 365 federated domain" section of the following Microsoft Knowledge Base article: �
2647048 How to update or to repair the configuration of the Office 365 federated domain

↑ Back to the top

More information

Still need help? Go to the�Office 365 Community�website or�the�Windows Azure Active Directory Forums website.

↑ Back to the top

Keywords: KB2707356, o365m, o365e, pre-upgrade, o365062011, upgrade, after, o365022013, mosdal4.5, o365a, o365

↑ Back to the top

Article Info
Article ID : 2707356
Revision : 10
Created on : 9/30/2013
Published on : 9/30/2013
Exists online : False
Views : 95