登录ADFS时出现错误-System.FormatException：索引（从零开始）必须大于或等于零且小于大小

Question

The Federation Service encountered an error while processing the SAML authentication request.

Additional Data

Exception details:

System.FormatException: Index (zero based) must be greater than or equal to zero and less than the size of the argument list.
   at System.Text.StringBuilder.AppendFormatHelper(IFormatProvider provider, String format, ParamsArray args)
   at System.String.FormatHelper(IFormatProvider provider, String format, ParamsArray args)
   at System.String.Format(IFormatProvider provider, String format, Object[] args)
   at Microsoft.IdentityServer.SR.GetString(String name, Object[] args)
   at Microsoft.IdentityServer.Web.Protocols.Saml.SamlProtocolManager.ValidateSignatureRequirements(SamlMessage samlMessage)
   at Microsoft.IdentityServer.Web.Protocols.Saml.SamlProtocolManager.Issue(HttpSamlRequestMessage httpSamlRequestMessage, SecurityTokenElement onBehalfOf, String sessionState, String relayState, String& newSamlSession, String& samlpAuthenticationProvider, Boolean isUrlTranslationNeeded, WrappedHttpListenerContext context, Boolean isKmsiRequested)

Answer 1

I got this when my relying party wasn't signing the requests but ADFS was expecting signed requests. It's clearly a bug in the error message creation code in ADFS.

Try turning it off in Power Shell with:

Set-ADFSRelyingPartyTrust -TargetIdentifier your-sp-identifier -SignedSamlRequestsRequired $false