"AD FS Token-Signing certificate found in a token does not match the certificate registered" error after you run the MOSDAL Support Toolkit

After you run the Microsoft Online Services Diagnostics and Logging (MOSDAL) Support Toolkit, the Active Directory Federation Services (AD FS) diagnostics log shows the following error:Note This log is located at Admin_Applications\SSO_Diagnostic_Tests\ADFSDiagnostic.txt.

Additionally, when you sign in to your Microsoft cloud service such as Office 365, Windows Azure, or Windows Intune by using a federated account, login.microsoftonline.com may return an "Organization could not sign you in" error.

This issue occurs if the AD FS token-signing certificate is expired because AD FS certificate auto-renew is deactivated.

To fix this issue, update the AD FS token-signing certificate info in the Windows Azure Active Directory (Windows Azure AD) authentication system. To do this, see the "How to update the configuration of the Office 365 federated domain" section of the following Microsoft Knowledge Base article:

Still need help? Go to the Office 365 Community website or the Windows Azure Active Directory Forums website.