ADFS：在建立Windows服務器上SSO連接錯誤2012

Question

，當我從我的代碼建立與ADFS連接來訪問我唱的URL（https://abcd.avcd.ac/adfs/ls/IdpInitiatedSignOn.aspx），我得到的錯誤是：

A WS-Trust endpoint that was configured could not be opened. 

Additional Data 
Address: https://win-3723jtvfe02.abcd.avcd.ac/adfs/services/trust/2005/windowstransport 
Mode: WindowsTransport 

Error: 
MSIS0006: A Service Principal Name is not registered for the AD FS service account. 

而且我也得到警告爲：

The SSL certificate does not contain all UPN suffix values that exist in the enterprise. 
Users with UPN suffix values not represented in the certificate will not be able to Workplace-Join their devices. 

請幫我弄清楚這個問題。

Answer 1

對於SPN問題，您需要獲得註冊。這裏有一篇關於technet的文章：http://social.technet.microsoft.com/wiki/contents/articles/1427.ad-fs-2-0-how-to-configure-the-spn-serviceprincipalname-for-the-service-account.aspx

如果您不使用ADFS 2012 R2的Workplace-Join功能，那麼您不必擔心其他錯誤。但是，如果您確實想要解決該問題，請參閱此處的文檔：https://technet.microsoft.com/en-us/library/dn614658.aspx