Sharepoint with AD FS ArgumentNullException

Question

Good day!
We have three servers on Windows Server 2012R2 installed ADFS, WAP and Sharepoint 2013. On WAP published several sites Sharepoint 2013 with through preauthentication. They can be seen from the outside, it is possible for them to go. But there were one problems:
We can not configure SAML-based claims authentication with AD FS in SharePoint 2013. Configure authentication for a claims-based saml on this documentation https://technet.microsoft.com/en-us/library/hh305235.aspx?f=255&MSPPError=-2147217396, in the end
there is the following exception
Server Error in '/' Application.
Value can not be null.
Description: An unhandled exception occurred during the execution of the current web request. Examine the stack trace for more information about the error and call it code snippet.
Exception Details: System.ArgumentNullException: Value can not be null.
Source Error:
An unhandled exception occurred during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace.
Stack Trace:
[ArgumentNullException: Значение не может быть неопределенным.]
Microsoft.SharePoint.Utilities.SPUtility.FormatAccountName(String provider, String user) +196
Microsoft.SharePoint.SPGlobal.CreateSPRequestAndSetIdentity(SPSite site, String name, Boolean bNotGlobalAdminCode, String strUrl, Boolean bNotAddToContext, Byte[] UserToken, SPAppPrincipalToken appPrincipalToken, String userName, Boolean bIgnoreTokenTimeout, Boolean bAsAnonymous) +3655
Microsoft.SharePoint.SPWeb.InitializeSPRequest() +307
Microsoft.SharePoint.SPWeb.EnsureSPRequest() +394
Microsoft.SharePoint.WebControls.SPControl.EnsureSPWebRequest(SPWeb web) +324
Microsoft.SharePoint.WebControls.SPControl.SPWebEnsureSPControl(HttpContext context) +610
Microsoft.SharePoint.Utilities.SPUtility.RedirectValidateInternal(String url, SPWeb web, HttpContext context, Boolean isTrusted) +320
Microsoft.SharePoint.Utilities.SPUtility.DetermineRedirectUrl(String urlProposed, SPRedirectFlags flags, HttpContext context, SPWeb overrideWeb, String queryString, String& urlRedirect) +828
Microsoft.SharePoint.Utilities.SPUtility.Redirect(String url, SPRedirectFlags flags, HttpContext context, String queryString) +101
Microsoft.SharePoint.IdentityModel.SPFederationAuthenticationModule.OnSignedIn(EventArgs eventArgs) +663
Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.SignInWithResponseMessage(HttpRequest request) +809
Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.OnAuthenticateRequest(Object sender, EventArgs args) +522
Microsoft.SharePoint.IdentityModel.SPFederationAuthenticationModule.OnAuthenticateRequest(Object sender, EventArgs eventArgs) +204
System.Web.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +176
System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +169
Event code: 3005
Event code: 3005
Event message: Возникло
необработанное исключение.
Event time: 27.04.2015 16:59:49
Event time (UTC): 27.04.2015 11:59:49
Event ID: 3cf0a03de8894665b1127d32672f5e8a
Event sequence: 14
Event occurrence: 4
Event detail code: 0
Application information:
    Application domain: /LM/W3SVC/973714976/ROOT-2-130746090512281500
    Trust level: Full
    Application Virtual Path: /
    Application Path: C:\inetpub\wwwroot\wss\VirtualDirectories\domen.local443\
    Machine name: SERVER
Process information:
    Process ID: 20236
    Process name: w3wp.exe
    Account name: domenАдминистратор
Exception information:
    Exception type: ArgumentNullException
    Exception message: Значение не может быть неопределенным.
   в Microsoft.SharePoint.Utilities.SPUtility.FormatAccountName(String provider, String user)
   в Microsoft.SharePoint.SPGlobal.CreateSPRequestAndSetIdentity(SPSite site, String name, Boolean
bNotGlobalAdminCode, String strUrl, Boolean bNotAddToContext, Byte[] UserToken, SPAppPrincipalToken appPrincipalToken, String userName, Boolean bIgnoreTokenTimeout, Boolean bAsAnonymous)
   в Microsoft.SharePoint.SPWeb.InitializeSPRequest()
   в Microsoft.SharePoint.SPWeb.EnsureSPRequest()
   в Microsoft.SharePoint.WebControls.SPControl.EnsureSPWebRequest(SPWeb web)
   в Microsoft.SharePoint.WebControls.SPControl.SPWebEnsureSPControl(HttpContext context)
   в Microsoft.SharePoint.Utilities.SPUtility.RedirectValidateInternal(String url, SPWeb web,
HttpContext context, Boolean isTrusted)
   в Microsoft.SharePoint.Utilities.SPUtility.DetermineRedirectUrl(String urlProposed, SPRedirectFlags
flags, HttpContext context, SPWeb overrideWeb, String queryString, String& urlRedirect)
   в Microsoft.SharePoint.Utilities.SPUtility.Redirect(String url, SPRedirectFlags flags, HttpContext
context, String queryString)
   в Microsoft.SharePoint.IdentityModel.SPFederationAuthenticationModule.OnSignedIn(EventArgs
eventArgs)
   в Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.SignInWithResponseMessage(HttpRequest
request)
   в Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.OnAuthenticateRequest(Object
sender, EventArgs args)
   в Microsoft.SharePoint.IdentityModel.SPFederationAuthenticationModule.OnAuthenticateRequest(Object
sender, EventArgs eventArgs)
   в System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
   в System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
Request information:
    Request URL: https://domen.local:443/_trust/
    Request path: /_trust/
    User host address: fe80::c0a7:b73a:afea:3972C:\inetpub\wwwroot\wss\VirtualDirectories\domen.local443\
    User: 
    Is authenticated: True
    Authentication Type: Federation
    Thread account name:DOMEN\Администратор
Thread information:
    Thread ID: 20
    Thread account name: DOMEN\Администратор
    Is impersonating: False
    Stack trace:    в Microsoft.SharePoint.Utilities.SPUtility.FormatAccountName(String
provider, String user)
   в Microsoft.SharePoint.SPGlobal.CreateSPRequestAndSetIdentity(SPSite site, String name, Boolean
bNotGlobalAdminCode, String strUrl, Boolean bNotAddToContext, Byte[] UserToken, SPAppPrincipalToken appPrincipalToken, String userName, Boolean bIgnoreTokenTimeout, Boolean bAsAnonymous)
   в Microsoft.SharePoint.SPWeb.InitializeSPRequest()
   в Microsoft.SharePoint.SPWeb.EnsureSPRequest()
   в Microsoft.SharePoint.WebControls.SPControl.EnsureSPWebRequest(SPWeb web)
   в Microsoft.SharePoint.WebControls.SPControl.SPWebEnsureSPControl(HttpContext context)
   в Microsoft.SharePoint.Utilities.SPUtility.RedirectValidateInternal(String url, SPWeb web,
HttpContext context, Boolean isTrusted)
   в Microsoft.SharePoint.Utilities.SPUtility.DetermineRedirectUrl(String urlProposed, SPRedirectFlags
flags, HttpContext context, SPWeb overrideWeb, String queryString, String& urlRedirect)
   в Microsoft.SharePoint.Utilities.SPUtility.Redirect(String url, SPRedirectFlags flags, HttpContext
context, String queryString)
   в Microsoft.SharePoint.IdentityModel.SPFederationAuthenticationModule.OnSignedIn(EventArgs
eventArgs)
   в Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.SignInWithResponseMessage(HttpRequest
request)
   в Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.OnAuthenticateRequest(Object
sender, EventArgs args)
   в Microsoft.SharePoint.IdentityModel.SPFederationAuthenticationModule.OnAuthenticateRequest(Object
sender, EventArgs eventArgs)
   в System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
   в System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
Custom event details:
Below is the log from the server Sharepoint
login attempts after him through AD FS
[Forced due to logging gap, cached @ 04/23/2015 14:15:33.24,
Original Level: Verbose] SQL connection time: 0.0931 for Data Source=sharepoint2013;Initial 
Catalog=SharePoint_Config1;Integrated Security=True;Enlist=False;Pooling=True;Min
Pool Size=0;Max Pool Size=100;Connect Timeout=15;Application 
Name=SharePoint[w3wp][4][SharePoint_Config1]
c67bff9c-d04d-7016-86c3-95382b2ada70
04/23/2015 14:15:33.30 
w3wp.exe (0x32CC)          
            0x3E3C
SharePoint Foundation         
Topology            
umbj
 High 
 [Forced due to logging gap, Original Level:
Verbose] Deserializing the type named {0} and with id {1}.
c67bff9c-d04d-7016-86c3-95382b2ada70
04/23/2015 14:15:33.35 
w3wp.exe (0x32CC)          
            0x3E3C
SharePoint Foundation         
Claims Authentication         
f2us
Verbose Claims
Saml Sign-In: Redirecting to 'https://adfs.domain.ru/adfs/ls?wa=wsignin1.0&wtrealm=urn%3asharepoint%3aportal.domain.ru&wctx=https%3a
%2f%2fportal.domain.ru%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252F'
to authenticate for request 'https://portal.domain.ru/_trust/default.aspx?
trust=ADFS30&ReturnUrl=/_layouts/15/Authenticate.aspx?Source=%252F&Source=/'.
c67bff9c-d04d-7016-86c3-95382b2ada70
04/23/2015 14:15:33.35 
w3wp.exe (0x32CC)          
            0x3E3C
SharePoint Foundation         
Micro Trace            
      uls4
Medium  
 Micro Trace Tags: 0 nasq,1 agb9s
c67bff9c-d04d-7016-86c3-95382b2ada70
04/23/2015 14:15:33.35 
w3wp.exe (0x32CC)          
            0x3E3C
SharePoint Foundation         
Monitoring            
b4ly

Answer 1

I know this is an old thread and the question was specifically for Windows Server 2008 R2, but I wanted to let folks know that we've published a new set of step-by-step instructions for AD RMS with AD FS on Windows Server 2012 R2.
We also ran into a lot of problems when trying to get this working and one of the things that we specifically included in this new document, was checkpoint verification tests - both "just in time" and repeated in a summary section with tips
for what to check if the tests fail.  Hopefully, with these checkpoints, you can narrow down the problem or at least eliminate what isn't a problem. And when we ran into odd, quirky things ourselves (such as case-sensitivity for some values, or the importance
of a trailing "/"), we included these in the document as well. If you have any other tips, consider adding them as a Community Addition at the bottom of the page to help other people.
Deploying Active Directory Rights Management Services with Active Directory Federation Services