HI all. 

 Stuck on a Azure AD Connect Install. 

 " Configure AAD Sync

    An error occured executing Configure ADD Sync Task: Unable to establish a connection to the authentication service"

 No proxy is in the mix. Netsh winhttp show proxy returns 'Direct Access ( No Proxy)'

 POwerShell command : Invoke-WebRequest -Uri https://adminwebservice.microsoftonline.com/ProvisioningService.svc

 Returns StatusCode: 200 Status Description: OK

 Firewall allows IP ANY for this server.

 Windows Firewall is turned off.

 Relevant error message :

Any help greatly received.

 Lyall

when tryin to use the custom install wizard and once it gets to the part where you can filter by OU, i get attached error below:

[10:08:13.161] [  1] [INFO ] Page transition from "Domain/OU Filtering" [ConfigPartitionFilterPageViewModel] to "Error" [ErrorPageViewModel]
[10:08:13.192] [  2] [ERROR] A terminating unhandled exception occurred.
Exception Data (Raw): System.AggregateException: A Task's exception(s) were not observed either by Waiting on the Task or accessing its Exception property. As a result, the unobserved exception was rethrown by the finalizer thread. ---> System.NullReferenceException: Object reference not set to an instance of an object.
   at Microsoft.Online.Deployment.OneADWizard.UI.Controls.PartitionFiltering.LdapTreeviewViewModel..ctor(DirectoryConnectionViewModel directory)
   at Microsoft.Online.Deployment.OneADWizard.UI.WizardPages.ConfigPartitionFilterPageViewModel.CreateForestPartitionExpanderViewModel(DirectoryConnectionViewModel connection)
   at Microsoft.Online.Deployment.OneADWizard.UI.WizardPages.ConfigPartitionFilterPageViewModel.CreateTreeviewForForest(DirectoryConnectionViewModel directory)
   at Microsoft.Online.Deployment.OneADWizard.UI.WizardPages.ConfigPartitionFilterPageViewModel.OnLoadTask(Object task)
   at System.Threading.Tasks.Task.Execute()
   --- End of inner exception stack trace ---
---> (Inner Exception #0) System.NullReferenceException: Object reference not set to an instance of an object.
   at Microsoft.Online.Deployment.OneADWizard.UI.Controls.PartitionFiltering.LdapTreeviewViewModel..ctor(DirectoryConnectionViewModel directory)
   at Microsoft.Online.Deployment.OneADWizard.UI.WizardPages.ConfigPartitionFilterPageViewModel.CreateForestPartitionExpanderViewModel(DirectoryConnectionViewModel connection)
   at Microsoft.Online.Deployment.OneADWizard.UI.WizardPages.ConfigPartitionFilterPageViewModel.CreateTreeviewForForest(DirectoryConnectionViewModel directory)
   at Microsoft.Online.Deployment.OneADWizard.UI.WizardPages.ConfigPartitionFilterPageViewModel.OnLoadTask(Object task)
   at System.Threading.Tasks.Task.Execute()<---

Hi,

we have setup ADConnect between on-prem trusted ADForests => AzureAD
All domains were declared / validated under azure AD and SSO tests are OK except one.

The contoso.com domain has a child domain child.contoso.com
A couple of AD OUs from each of these domains were selected on ADConnect and sync is OK
( => all accounts selected are visible on o365 console)

contoso.com on-premise domain has been validated on azure and converted for federation
child.contoso.com on-premise domain has also been validated on azure and converted for federation

contoso.com domain users can connect successfully to their o365 env. 

The issue : 
 child.contoso.com domain users can not connect to their o365 env.           
 They are promted by a ADFS error message wich says that the url below was not found
http://child.contoso.com/adfs/services/trust/ does not exist

Actually that message is correct since the child.contoso.com users should have been redirected
to a url looking like http://tiptip.contoso.com/adfs/services/trust/
wich actually answers to all company’s authentication federation requests …

Any help would be much appreciated.

Thanks.

MCTS Windows Server Virtualization, Configuration

John Marcum | Microsoft MVP - Enterprise Client Management
My blog: System Center Admin | Twitter:@SCCM_Marcum | Linkedin: John Marcum

I'm trying set up a Primary AD FS 3.0 Server in Windows Azure for Office 365 Single Sign-On. I have no idea how to add a VM I provisioned to the local domain.

Can someone help?

Trying to figure out how i would go about getting AADS set up.  We have approx. 80 AD users and 120 office 365 accounts.

The office 365 accounts were created through the 365 portal.  Our 365 account has 5 domains attached.  Our AD domain is loc.local.com our email domains are local.com, local2.com,etc.  

Is AADS capable of syncing one AD user to multiple 365 users?

Hi,

I have purchased Azure subscription through CREST API.Please clarify the following questions

1. What are the steps i should follow to access the service management rest API through Authentication token?

2. How do I associate the subscription and user in the azure management portal?

3. How do i retrieve the subscription operations via authentication token?

Hi,

Created the CSP customer using the CREST API. In order to manage the CSP customer users we created user with delegated Admin permissions. 

We are able to get the access token (https://login.windows.net/<sandboxDomain>/oauth2/token?api-version=1.0) for the delegated admin.

now we are trying to get the users under customer (https://graph.windows.net/<customerDomain>/users?api-version=1.6)

but we are facing 

{
  "odata.error": {
    "code": "Request_BadRequest",
    "message": {
      "lang": "en",
      "value": "Invalid domain name in the request url."
    }
  }
}

Regards,

Bharamagouda

In my application I am using a workspace in which I have 2 different projects. For both the project's authentication I am using ADALiOS convergence branch. i have included these files individually in both projects manually. Now as per my knowledge I know that adal stores user login info inside keychain. Now for individually both apps I have different users. If I install app1 in my device and run it, all works fine. Now if I install app2 in same device and run it then I am getting following error

"The token cache store for this resource contain more than one user. Please set the 'userId' parameter to determine which one to be used.." 

and clicking on SignIn button does not land me on my sign in web page. Please someone help me asap....

HI,

I have tried to authenticate the service management rest API through token. I am facing the below issue 

Request:

var adal=require('adal-node');
var AuthenticationContext = adal.AuthenticationContext;
var tenantID = 'cccomputenext.onmicrosoft.com';
var clientID = 'f3486cb5-be64-47e4-906c-f893891908f9';
var clientSecret = 'h5cUPFmFmR8tEb+ibclCfjBpous+zpNZSXuZH7FoxA0='
var resource="https://management.core.windows.net/";
var authURL="https://login.windows.net/" + tenantID;

var context=new AuthenticationContext(authURL);

var rest = require('restler');

context.acquireTokenWithClientCredentials(resource,clientID, clientSecret, function(err,tokenResponse) {

console.log('err:'+err);
console.log('tokenResponse:'+JSON.stringify(tokenResponse,null,2));

authHeader = tokenResponse['accessToken'];
requestURL="https://management.core.windows.net/984527eb-f9d7-4c40-9baa-8e6c945da691";
rest.get(requestURL, {accessToken:authHeader}).on('complete',function(result)
{
    console.log('result:'+JSON.stringify(result,null,2));

});
});

Response:

tokenResponse:{
  "tokenType": "Bearer",
  "expiresIn": 3599,
  "expiresOn": "2016-02-18T15:37:43.294Z",
  "resource": "https://management.core.windows.net/",
  "accessToken": "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6Ik1uQ19WWmNBVGZNNXBPWWlKSE1iYTlnb0VLWSIsImtpZCI6Ik1uQ19WWmNBVGZNNXBPWWlKSE1iYTlnb0VLWSJ9.eyJhdWQiOiJodHRwczovL21hbmFnZW1lbnQuY29yZS53aW5kb3dzLm5ldC8iLCJpc3MiOiJodHRwczovL3N0cy53aW5kb3dzLm5ldC82MWFiODk4MC1iY2MwLTQ5YWUtOTcwMi0xZmQxZDIzYTRkOTIvIiwiaWF0IjoxNDU1ODA1OTY0LCJuYmYiOjE0NTU4MDU5NjQsImV4cCI6MTQ1NTgwOTg2NCwiYXBwaWQiOiJmMzQ4NmNiNS1iZTY0LTQ3ZTQtOTA2Yy1mODkzODkxOTA4ZjkiLCJhcHBpZGFjciI6IjEiLCJpZHAiOiJodHRwczovL3N0cy53aW5kb3dzLm5ldC82MWFiODk4MC1iY2MwLTQ5YWUtOTcwMi0xZmQxZDIzYTRkOTIvIiwidGlkIjoiNjFhYjg5ODAtYmNjMC00OWFlLTk3MDItMWZkMWQyM2E0ZDkyIiwidmVyIjoiMS4wIn0.bhhsOncFnE8quJSMBIsGiTxzN7ubSAa2yc7NKa_Qe2nKkdrZJymiO9GjgVWXKOOcJVxagHDVqngAFEiH9LqyHG8w1jY2LXCoP0o7ZHGlI1AXhz1BFasikev4bSno753eknb75yNj1UI42bUZ4WdxPBVU4LiJGBkzAmwM5YMAtQj9lhcRHVJK2kRAeE0yQpSngtrzwoIJazyQihHYVcMy_qLJrHX4Mu_EFzzDXV2TRCuajOr66CjUpPKSkXxbAaY6PJ7zZWxYkh1Xb-i0AJcPzxlK7vRAOXK9RB8CCFUqzKrY8mHDCLiKKegphTyD7q4hqJ5JPIUR0Mrl-7elWaXDVQ",
  "isMRRT": true,
  "_clientId": "f3486cb5-be64-47e4-906c-f893891908f9",
  "_authority": "https://login.windows.net/cccomputenext.onmicrosoft.com"
}
result:{
  "Error": {
    "$": {
      "xmlns": "http://schemas.microsoft.com/windowsazure",
      "xmlns:i": "http://www.w3.org/2001/XMLSchema-instance"
    },
    "Code": [
      "ForbiddenError"
    ],
    "Message": [
      "The server failed to authenticate the request. Verify that the certificate is valid and is associated with this subscription."
    ]
  }
}

Can anyone please help me on this?

I have an web app that gets access tokens from Azure AD. It works fine in local dev environment, but it's unable to get access token once deployed to Azure.

The web app uses AuthenticationContext.AcquireTokenSilent to get the token, but it throws AdalSilentTokenAcquisition on Azure.

I followed this example to do token acquisition: https://github.com/Azure-Samples/active-directory-dotnet-webapp-webapi-openidconnect-aspnet5

My code is almost identical to the example.

Does anyone know if there are restrictions/configurations on Azure app services that might affect token acquisition? I have checked all the configurations for AD application and they seem fine, so I suspect it might be related to Azure app services.

From @MikeMissakvia Twitter

 @AzureSupport how do i bind a mac to my Azure AD domain service cloud for the first time?

https://twitter.com/MikeMissak/status/700308781947887616

Thanks,

@AzureSupport

Hi,

I updated my Azure AD Connect to 1.1.105.0. Now when after the install completes and opening the AD Connect icon on the desktop I got this message:

The log file tells me this:

[11:36:13.912] [  1] [INFO ] Found existing persisted state context.
[11:36:13.912] [  1] [ERROR] Caught an exception while creating the initial page set on the root page.
Exception Data (Raw): System.IndexOutOfRangeException: Index was outside the bounds of the array.
   at Microsoft.Online.Deployment.Types.Utility.AdDomainInfoEncoder.ConvertBack(Object value, Type targetType, Object parameter, CultureInfo culture)
   at Microsoft.Online.Deployment.Types.PersistedState.PersistedStateElement.ToContext(PersistedStateContainer state, PropertyInfo propertyInfo, PersistedElementAttribute attr, Object& value)
   at Microsoft.Online.Deployment.Types.Context.LocalContextBase.LoadFromState(PersistedStateContainer state, IPowerShell powerShell)
   at Microsoft.Online.Deployment.OneADWizard.UI.WizardPages.RootPageViewModel.GetInitialPagesCore()
   at Microsoft.Online.Deployment.OneADWizard.UI.WizardPages.RootPageViewModel.GetInitialPages()
[11:36:41.346] [  1] [INFO ] Opened log file at path C:\Users\mark-s\AppData\Local\AADConnect\trace-20160218-113613.log

Now when I look I only see 1 part updated in the program and features:

Anyone can point me in the right direction to solve this issue?

Many thanks.

Best regards, Mark Scholman. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

John Marcum | Microsoft MVP - Enterprise Client Management
My blog: System Center Admin | Twitter:@SCCM_Marcum | Linkedin: John Marcum

I am using 'Convergence' branch for ADALiOS authentication in my swift project. Firstly whenever I am using pod for this branch it is not able to recoginse any of  ADAL classes. So I copied all the files and added them manually into my project. WHich then had some issues with also but then Is solved it because after whole lot of studies I got to know that there is some issue with my provisioning profile only. Which I solved later on. 

 Now back to the question again. Inside support file I have added plist where all authority, client id, redirect uri etc info is saved. In addition of this I have added an entitlement file also with following content

$(AppIdentifierPrefix)com.microsoft.adalcache

Following is the code which I am writing to get access token before making any service call. As soon as my app starts, before making first web service call it asks for credentials and then inside my output log I am getting following error

ADALiOS [2015-12-17 09:50:08 - 1EC5EEC5-1205-4256-AC15-6051743A49A4] ERROR: Error raised: 11. Additional Information: Domain: ADAuthenticationErrorDomain ProtocolCode: -25243 Details: ADAL Keychain "__51-[ADKeychainTokenCacheStore addOrUpdateItem:error:]_block_invoke" operation failed with error code -25243.. ErrorCode: 11.

This clearly indicates that adal is not able to store my token cache inside my keychain. Because of above error it is not able to get new access token using refresh token hence, login page is opening before each service call. Although there I don't need to enter my credentials but yes the screen comes up again and again.

So I got this ans and I solved it using below one

I was also unable to run on device with either "Keychain Sharing Entitlements" turned on, OR the following code (as recommended above, replacing bundle with my apps bundle ID):
[[ADAuthenticationSettings sharedInstance] setSharedCacheKeychainGroup:@"<your.bundle.id.here>"];

The only thing that worked was to set the keychain group to "nil" (my code in Swift):
ADAuthenticationSettings.sharedInstance().sharedCacheKeychainGroup = nil

After all this struggle as soon as my token expires ADAL classes are not able to get new access token from refresh token.  

Following error if what I am getting in my logs

ADALiOS [2016-01-13 17:03:28 - EFB5A99A-A21E-48B9-8468-26116DBCDAED] ERROR: Error raised: 7. Additional Information: Domain: ADAuthenticationErrorDomain ProtocolCode: invalid_request Details: AADSTS50091: Passed query string length exceeds supported limit. encodedRequest="rQIIAVWTOcv1CBmG-b73Q3AGBhcGrMRCRIQcsi922deTnJM9aQ7Z9-RkPUlqf8GUlna2ooXgL7AappzSSgbEv-A72GjzFNdV3Txcn32OXMALCDyn7AL95g2-gL_9JRpHSUZEMADh7wdFEQyIIpQCQIrKqJTCICpDpp989qPf__Ev__75H_4q_a781Y-7v337r39--PD1xw_ffvzcoNelhO2hyfp_fPwZ21ZZv9B96szZ9D_qq7e3-rV89fbTIfqeXaYsn7K5XL53f3r7MpqaKLoMfVcl0zAP-XJJhu7vb18Oed5WffaIkiSb518Mz6yv0m_evvh__s3bD_5rvv706btPH3_94bsf_vmL7FCmyLtXRqXUidguAUwdoUu-DFuGrjW965Y8y33YJpWMyzW_XlmFulw6sGdTDjis_uBI9OpeAJnmjhN1ySGQzBUU86LOS6912wED1SWDXAw1Df_Oj5nJogjfPG3unvJhg8DwLQ9bbYieSS3GwiP0cWmXudSdVp4xaKd1E5Pq0Dh1rxFajSFDpvMYLON2e5KmLQT2uerlwmaBsImp5SzbA9Q92-ZfXAw4r6ZTCkQm9Gz3B81ak6uN3JMceNxex1VLyaMAnPIFKSzz2nBLS1QAAl9VcuvcDgsWNQ4ku4mdlWDPMLlVmSIgLUfavpL3sTdVSDjgjCbDeL4OtlqnGOeDZQ5PmvyoYJP3tBUqV_kQQlpMovFOBU-tue1tJDN3CXgUdkPm6YlR5_ygWP2u8RU9tEfV-cmVofk5FvlKCEdtSgnYu1mTurNQGO5CWiIj-lJxBtC6gOB0U0DwkhRdRbwa3ZS_zkPHTTW0rAfMDOWp9a1Y1iFOYbWEYsNZcTqLt8-zyzFFY6VgAtSF1QgGBMIRGBetRCrQoLBI53WU1EQGFcd7K_hueKA786DjF3mbqmyoYHUBGJQFnVlZn6iYAYWYYwicjvYM5D4TtpQ9e_TumfKr6I1ZGeCFlUyqePGbP1shomHH3atuY3VDKx2GUGBq-_exr2lLyQE5d-9KbUuNxE6iuUAWb8K6CRMS2CFTTh6G-RaWXJHuDJ5nkO8L46cpcfZQaBrmrVFyB4Fvjq8sTnZdR7zKNghjcwaBI19LFyACpYOpsJkMTHlBV7B5Trv84pVQJ5KiyNDTRm0pJC0BbEwO8o6rjD-47anDyq7dpVWFpXLcvBCeOZmq-wqQ0nL1C9_gih3RVKljWl_C--EmceJhVckppPHy_iX6HE1CAEql8_yKZxw-6OM4BWIn5Z-vDtnvg8FuzYj7XMOBr66sC5O71lNmSImIkfkuiZLQJtA6NwqRSyHYnZSfilF9JjlLBOoDBO8GvqDE3YYB9b6has3RZwHC8gCDzXbUJSYeq0UyQh4d5a3HsVIRsxF9pCRzDnKoyje9tAzp5opJzxQY7PaWnz2FLswylCPlo6XXMeLfK8nwTlIepHz36WYLhhDdvC1eofoRijPkMo0_xPUExL1lUAZPeWx6DhaHQLiBYPjAOa9OUg2zayllBZ74Eoh5a_vInlEMyWUl7HAFcD7KE75tRiQXLDz5zyQ1gaOqLbqZ2Im_74axty7fh3wbF0QhUKLZEmdEbfHVeDhOqnXWdgAkbHe9Nqvpk_R4eGTROiFwjLjTeAPdtYkGKCGop2rPxBdTWDVBJ8Hstw0YaUzd6g4N5LNSRFx6VVWUyrkxKcqr1Dn5g9Vd4taUUZiDSzzBHQv27d4VdFTLpWBKaqIz49DvQUsB6-20ASEkhZJiiuadk8l9YoTKVfwxM9JVj1LM3kLeSqFzzLrAonFoXi3PSVLocLDkPWSwUgUZEPWXnpN6MMMFqFD0qs0T-sDYkQxHFqETVj2j1kN7fsLckQRWg9pzyj76QWPGVLXnp9W014azebsvLHJYAbXvKVPdqegJrit8KjHG6fYj1HuBTR6EqHYKg3B4uS2uF8gDoJpHgTouoY-0cbeZ69A43SRDHsGpk4nX2laRrVUbeFNVieeTMQZaqlYSRoCpDCi2T4Oqtpqb85zWkCCo0zK7G7l7XaUHAMP-DOnEGmcejs5Wezyl95gagLlPI5mrt-gW319G02pL7rHXV2K6IdJJ5RmUeMZMHZQ-U79ubr1ElNgLwFVbqmy6Z3UIxxO0DFkHuNdxgQ14QgVT5lcYWVvpE8Pka4WoNa9Y0eCekmeaeBhsDiMd6nOP4PfojNelEQRWJhEsE9KHiav74udyQv8H0"

Trace ID: 8df08fb0-44eb-4d69-bccd-47cc0f8077d3

Correlation ID: efb5a99a-a21e-48b9-8468-26116dbcdaed

Timestamp: 2016-01-13 17:03:27Z. ErrorCode: 7.

Objective: Build Two Tier SharePoint 2010 farm on Azure.

Deployment process

1. VM built to install SharePoint 2010 Server in Vnet.
2. Azure SQL Service created to stored SharePoint 2010 databases
3. Azure Active Directory provisioned with few users , no groups yet.

NO DNS so far to join VM to a domain.

It is understood from this video and MSDN page that "Azure AD Domain Services" can be configured in "Azure Active Directory" to create a domain without a separate DNS server. 

Issue

while configuring "Azure AD Domain Services" on "Azure Active Directory" configuration page "CONNECT DOMAIN SERVICES TO THIS VIRTUAL NETWORK" is not populating any existing Vnet.

under "domain services" (Preview) below is the configuraiton

ENABLE DOMAIN SERVICES FOR THIS DIRECTORY -- YES
DNS DOMAIN NAME OF DOMAIN SERVICES           -- default was "TidewayDevTest.onmicrosoft.com", changed to "TidewayDevTest"
CONNECT DOMAIN SERVICES TO THIS VIRTUAL NETWORK -- Nothing populated as shown below.

There is an existing Vnet where my VM exists.

My understanding is that with the above i.e., VM, Azure SQL, Azure AD & Domain Services it is feasible to create few service accounts in Azure AD, create SQL account (Domain) , install and configure the SP2010 farm. 

Help appreciated.

Thank you

Apriori algorithm [association rule]

Trying to upgrade my AADC to the newest version. The file runs and files are extracted and everyrhing seems good. Then the GUI launch and stops with the following error: 

IndexOutofRangeException

Index was outside the bounds of the array.

The log shows the following errors: