Windows identity foundation

how to install windows identity foundation in windows 10..??
Now have problems with install Microsoft Dynamics AX 2012 Client in 1 terminal with Windows 10, and the installer can't launch because show the next message Windows Update Standalone Installer. Installer encountered an error 0x80096002. The certificate for
the signer of the message is invalid or not found.
Help I have provate this aplication for update user of AX 2012.

If installing .NET 4.5 doesn't work, then there is no way to install this functionality. Someone mentioned a workaround, which is to copy the DLL files from a Windows 8.1 install to the Windows 10 install, but there's nothing built in
right now.
The WIF libraries were moved into the base install of .NET 4.5, that's why I suggested installing .NET 4.5 and seeing what happens. If that doesn't work, then either 1) you'll need to wait until Microsoft updates Win 10 with the ability to install
this feature, or 2) copy the DLLs from a Windows 8.1 install of WIF.
Hope that helps!

Similar Messages

Cannot install Windows-Identity-Foundation

Hello, I've tried to install "Windows-Identity-Foundation" feature, but without success (OS is Windows 8.1 Professional).
I can not find this feature in the UI (ControlPanel -> Programs&Features -> "Turn Windows Features on or off").
So I've tried to install it via command line (dism tool).
I've checked feature via executing command "dism /online /Get-FeatureInfo /FeatureName:Windows-Identity-Foundation"
this command line is returning correct output on working machine,
but on my machine it returns:
> Error: 0x800f080c
> Feature name Windows-Identity-Foundation is unknown.
> A Windows feature name was not recognized.
So I can't install it via the "dism /online /Enable-Feature /FeatureName:Windows-Identity-Foundation" command.
That issue is occurs not only with the "Windows-Identity-Foundation", but also with some other features (for example "Legacy Components").
Next I googled that this issue may be fixed via calling "sfc /scannow" to restore the packages,
but "sfc" is ended with message "Windows Resource Protection found corrupt files but was unable to fix some of them.";
the log file contains the next errors:
* STATUS_OBJECT_NAME_NOT_FOUND #5186404# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile(
* Error STATUS_OBJECT_NAME_NOT_FOUND originated in function Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile expression
(full logs I put in the onedrive http://1drv.ms/1BILQWs )
so that errors are not clear to me,
please guide me how I can try to fix this issue?
any advice is welcome.

Just have tried to execute "InstallFeature" with /Sourceand locate image with windows installation files
>dism /online /enable-feature /featurename:Windows-Identity-Foundation /Source:G:\sources\sxs
and the response:
Error: 0x800f080c
Feature name Windows-Identity-Foundation is unknown.
A Windows feature name was not recognized.
The dism.log file contains errors:
* Failed to get the Update through CBS. - CDISMPackage::Internal_OpenFeature
* Failed to get the underlying CBS Feature - CDISMPackage::OpenFeature
* Feature name windows-identity-foundation is unknown. - CPackageManagerCLIHandler::Private_GetFeaturesFromCommandLine
* Unknown features were specified on the command-line. - CPackageManagerCLIHandler::Private_GetFeaturesFromCommandLine
* Failed to get the Feature List from the command line. - CPackageManagerCLIHandler::Private_ProcessFeatureChange
* Failed while processing command enable-feature. - CPackageManagerCLIHandler::ExecuteCmdLine
Full log file copied to onedrive: http://1drv.ms/18TpVSf .
I am accepting any advice.

Unable to install Windows Identity Foundation on Windows 7

Following installtion guide titled "Setting Up the Development Environment for SharePoint 2010 on Windows Vista, Windows 7, and Windows Server 2008".
I am installing SharePoint Foundation 2010 on Windows 7 Enterprise 64 Bit. Following the guide above, I was able to install all of the prerequisites except for the two hotfixes: KB976462 and KB974405. Ater some research I believe KB976462 is
to be installed after KB974405 so I am troubleshooting this item before. I've downloaded the MSU file (Windows6.1-KB974405-x64.msu) and during the installtion for KB974405 it reports that the installation failed. When I go into the Windows
Update history and check the details for that update attempt it indicates Error Code 80070643. This seems to be a generic failure so I'm having trouble with solving it.
I've searched as best as I could for the solution but the solutions for others I've seen online didn't work for me. I've double checked the prerequisites for the hotfix and have IIS 7.5 as well as .NET Framework 3.5 SP1. I used the .NET
Framework Setup Verification Tool and did not see any issues. The other potention issue I saw was that in the Windows Update screen it says that "Some settings are managed by your system administrator" and automatic updates are turned
off. However, I was given a username and password that has local admin rights and that's what I was able to use to install all of the other items in the guide. Therefore I don't think that would be the issue. I'm really stuck and not sure
at all how to proceed at this point.
When I tried installing SPF 2010 dispite that error, during the wizard I recieved the error "Failed to load dependency Microsoft.IdentityModel of assembly Microsoft.SharePoint". Based on that I saw that KB974405 couldn't be ignored.
Edit: Please see complete error log below.

Below is the complete error log of the installation attempt:
2014-04-20 17:21:49:458 3308 9e8 Misc =========== Logging initialized (build: 7.5.7601.17514, tz: -0700) ===========
2014-04-20 17:21:49:458 3308 9e8 Misc   = Process: C:\windows\system32\wusa.exe
2014-04-20 17:21:49:458 3308 9e8 Misc   = Module: C:\Windows\system32\wuapi.dll
2014-04-20 17:21:49:457 3308 9e8 COMAPI ----------- COMAPI: IUpdateServiceManager::AddScanPackageService -----------
2014-04-20 17:21:49:459 3308 9e8 COMAPI   - ServiceName = Windows Update Standalone Installer
2014-04-20 17:21:49:459 3308 9e8 COMAPI   - ScanFileLocation = C:\31ee30e9c2a50686553b\wsusscan.cab
2014-04-20 17:21:49:464 576 7bc Misc Validating signature for C:\windows\SoftwareDistribution\ScanFile\758e58e0-c318-45ba-b6ae-e6b311555e5c\Source.cab:
2014-04-20 17:21:49:473 576 7bc Misc Microsoft signed: Yes
2014-04-20 17:21:49:479 576 7bc DtaStor Default service for AU is {9482F4B4-E343-43B6-B170-9A65BC822C77}
2014-04-20 17:21:49:480 3308 9e8 COMAPI   - Added scan package service, ServiceID = {758E58E0-C318-45BA-B6AE-E6B311555E5C} Third party service
2014-04-20 17:21:49:480 3308 9e8 COMAPI -------------
2014-04-20 17:21:49:480 3308 9e8 COMAPI -- START -- COMAPI: Search [ClientId = wusa]
2014-04-20 17:21:49:480 3308 9e8 COMAPI ---------
2014-04-20 17:21:49:486 576 2484 Agent *************
2014-04-20 17:21:49:486 576 2484 Agent ** START ** Agent: Finding updates [CallerId = wusa]
2014-04-20 17:21:49:486 576 2484 Agent *********
2014-04-20 17:21:49:486 576 2484 Agent   * Online = Yes; Ignore download priority = No
2014-04-20 17:21:49:486 576 2484 Agent   * Criteria = "DeploymentAction='Installation'"
2014-04-20 17:21:49:486 3308 9e8 COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = wusa]
2014-04-20 17:21:49:486 576 2484 Agent   * ServiceID = {758E58E0-C318-45BA-B6AE-E6B311555E5C} Third party service
2014-04-20 17:21:49:486 576 2484 Agent   * Search Scope = {Machine}
2014-04-20 17:21:49:606 576 2484 PT +++++++++++ PT: Synchronizing server updates +++++++++++
2014-04-20 17:21:49:606 576 2484 PT   + Offline serviceId = {758E58E0-C318-45BA-B6AE-E6B311555E5C}
2014-04-20 17:21:49:606 576 2484 PT WARNING: Cached cookie has expired or new PID is available
2014-04-20 17:21:50:227 576 2484 PT +++++++++++ PT: Synchronizing extended update info +++++++++++
2014-04-20 17:21:50:227 576 2484 PT   + Offline serviceId = {758E58E0-C318-45BA-B6AE-E6B311555E5C}
2014-04-20 17:21:50:303 576 2484 Agent   * Added update {B78C39B2-C915-4F8C-9780-23F71C14A560}.501 to search result
2014-04-20 17:21:50:303 576 2484 Agent   * Found 1 updates and 62 categories in search; evaluated appl. rules of 129 out of 415 deployed entities
2014-04-20 17:21:50:304 576 2484 Agent *********
2014-04-20 17:21:50:304 576 2484 Agent ** END ** Agent: Finding updates [CallerId = wusa]
2014-04-20 17:21:50:304 576 2484 Agent *************
2014-04-20 17:21:50:305 3308 21ec COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = wusa]
2014-04-20 17:21:50:307 3308 21ec COMAPI   - Updates found = 1
2014-04-20 17:21:50:307 3308 21ec COMAPI ---------
2014-04-20 17:21:50:307 3308 21ec COMAPI -- END -- COMAPI: Search [ClientId = wusa]
2014-04-20 17:21:50:307 3308 21ec COMAPI -------------
2014-04-20 17:21:52:602 576 7bc DnldMgr *********** DnldMgr: Copy update to cache [UpdateId = {0B05DEF0-BBC7-48EB-BA7A-8AA72411783C}.501] ***********
2014-04-20 17:21:52:602 576 7bc DnldMgr Asking handler to generate non-range requests.
2014-04-20 17:21:52:602 576 7bc Handler Generating request for CBS update 0B05DEF0-BBC7-48EB-BA7A-8AA72411783C in sandbox C:\windows\SoftwareDistribution\Download\8709ecf85b29aaabb0f3e3cdc126a9e4_ctc
2014-04-20 17:21:52:602 576 7bc Handler Selecting self-contained because update does not have express payload.
2014-04-20 17:21:52:603 576 7bc Handler Selected payload type is ptSelfContained
2014-04-20 17:21:52:603 576 7bc Handler Detected download state is dsStart
2014-04-20 17:21:52:603 576 7bc Handler Adding Windows6.1-KB974405-x64.cab (entire file) to request list.
2014-04-20 17:21:52:606 576 7bc Handler Request generation for CBS update complete with hr=0x0 and pfResetSandbox=0
2014-04-20 17:21:52:613 576 7bc Misc Validating signature for C:\windows\SoftwareDistribution\Download\8709ecf85b29aaabb0f3e3cdc126a9e4_ctc\Windows6.1-KB974405-x64.cab:
2014-04-20 17:21:52:661 576 7bc Misc Microsoft signed: Yes
2014-04-20 17:21:52:661 576 7bc DnldMgr Asking handler to generate non-range requests.
2014-04-20 17:21:52:661 576 7bc Handler Generating request for CBS update 0B05DEF0-BBC7-48EB-BA7A-8AA72411783C in sandbox C:\windows\SoftwareDistribution\Download\8709ecf85b29aaabb0f3e3cdc126a9e4_ctc
2014-04-20 17:21:52:661 576 7bc Handler Selecting self-contained because update does not have express payload.
2014-04-20 17:21:52:661 576 7bc Handler Selected payload type is ptSelfContained
2014-04-20 17:21:52:661 576 7bc Handler Detected download state is dsHavePackage
2014-04-20 17:21:52:664 576 7bc Handler Request generation for CBS update complete with hr=0x0 and pfResetSandbox=0
2014-04-20 17:21:54:230 3308 9e8 COMAPI -------------
2014-04-20 17:21:54:230 3308 9e8 COMAPI -- START -- COMAPI: Install [ClientId = wusa]
2014-04-20 17:21:54:230 3308 9e8 COMAPI ---------
2014-04-20 17:21:54:230 3308 9e8 COMAPI   - Allow source prompts: Yes; Forced: No; Force quiet: No
2014-04-20 17:21:54:230 3308 9e8 COMAPI   - Updates in request: 1
2014-04-20 17:21:54:230 3308 9e8 COMAPI   - ServiceID = {758E58E0-C318-45BA-B6AE-E6B311555E5C} Third party service
2014-04-20 17:21:54:231 3308 9e8 COMAPI   - Updates to install = 1
2014-04-20 17:21:54:231 576 2428 Agent *************
2014-04-20 17:21:54:231 3308 9e8 COMAPI <<-- SUBMITTED -- COMAPI: Install [ClientId = wusa]
2014-04-20 17:21:54:231 576 2428 Agent ** START ** Agent: Installing updates [CallerId = wusa]
2014-04-20 17:21:54:232 576 2428 Agent *********
2014-04-20 17:21:54:232 576 2428 Agent   * Updates to install = 1
2014-04-20 17:21:54:233 576 2428 Agent   *   Title = Update for Windows (KB974405)
2014-04-20 17:21:54:233 576 2428 Agent   *   UpdateId = {B78C39B2-C915-4F8C-9780-23F71C14A560}.501
2014-04-20 17:21:54:233 576 2428 Agent   *     Bundles 1 updates:
2014-04-20 17:21:54:233 576 2428 Agent   *       {0B05DEF0-BBC7-48EB-BA7A-8AA72411783C}.501
2014-04-20 17:21:54:242 576 2428 Agent WARNING: failed to calculate prior restore point time with error 0x80070002; setting restore point
2014-04-20 17:21:54:244 576 2428 Handler Attempting to create remote handler process as [] in session 1
2014-04-20 17:21:54:328 576 2428 DnldMgr Preparing update for install, updateId = {0B05DEF0-BBC7-48EB-BA7A-8AA72411783C}.501.
2014-04-20 17:21:54:331 7904 2290 Misc =========== Logging initialized (build: 7.5.7601.17514, tz: -0700) ===========
2014-04-20 17:21:54:331 7904 2290 Misc   = Process: C:\windows\system32\wuauclt.exe
2014-04-20 17:21:54:331 7904 2290 Misc   = Module: C:\windows\system32\wuaueng.dll
2014-04-20 17:21:54:329 7904 2290 Handler :::::::::::::
2014-04-20 17:21:54:331 7904 2290 Handler :: START :: Handler: CBS Install
2014-04-20 17:21:54:331 7904 2290 Handler :::::::::
2014-04-20 17:21:54:334 7904 2290 Handler Starting install of CBS update 0B05DEF0-BBC7-48EB-BA7A-8AA72411783C
2014-04-20 17:21:54:340 7904 2290 Handler CBS package identity: Microsoft-Windows-Identity-Foundation-Package-TopLevel~31bf3856ad364e35~amd64~~6.1.7600.16394
2014-04-20 17:21:54:342 7904 2290 Handler Installing self-contained with source=C:\windows\SoftwareDistribution\Download\8709ecf85b29aaabb0f3e3cdc126a9e4\Windows6.1-KB974405-x64.cab, workingdir=C:\windows\SoftwareDistribution\Download\8709ecf85b29aaabb0f3e3cdc126a9e4\inst
2014-04-20 17:22:20:838 7904 1214 Handler FATAL: CBS called Error with 0x80070643,
2014-04-20 17:22:20:937 7904 2290 Handler FATAL: Completed install of CBS update with type=0, requiresReboot=0, installerError=1, hr=0x80070643
2014-04-20 17:22:20:938 7904 2290 Handler :::::::::
2014-04-20 17:22:20:938 7904 2290 Handler :: END :: Handler: CBS Install
2014-04-20 17:22:20:938 7904 2290 Handler :::::::::::::
2014-04-20 17:22:20:940 576 2428 Agent *********
2014-04-20 17:22:20:940 576 b1c AU Can not perform non-interactive scan if AU is interactive-only
2014-04-20 17:22:20:940 3308 21ec COMAPI >>-- RESUMED -- COMAPI: Install [ClientId = wusa]
2014-04-20 17:22:20:940 576 2428 Agent ** END ** Agent: Installing updates [CallerId = wusa]
2014-04-20 17:22:20:940 3308 21ec COMAPI   - Install call complete (succeeded = 0, succeeded with errors = 0, failed = 1, unaccounted = 0)
2014-04-20 17:22:20:940 576 2428 Agent *************
2014-04-20 17:22:20:940 3308 21ec COMAPI   - Reboot required = No
2014-04-20 17:22:20:940 3308 21ec COMAPI   - WARNING: Exit code = 0x00000000; Call error code = 0x80240022
2014-04-20 17:22:20:940 3308 21ec COMAPI ---------
2014-04-20 17:22:20:940 3308 21ec COMAPI -- END -- COMAPI: Install [ClientId = wusa]
2014-04-20 17:22:20:940 3308 21ec COMAPI -------------
2014-04-20 17:22:23:877 3308 9e8 COMAPI ----------- COMAPI: IUpdateServiceManager::RemoveService -----------
2014-04-20 17:22:23:877 3308 9e8 COMAPI   - ServiceId = {758e58e0-c318-45ba-b6ae-e6b311555e5c}
2014-04-20 17:22:23:956 3308 9e8 COMAPI IUpdateService removing volatile scan package service, serviceID = {758E58E0-C318-45BA-B6AE-E6B311555E5C}
2014-04-20 17:22:23:957 576 2220 Agent WARNING: WU client fails CClientCallRecorder::RemoveService with error 0x80248014
2014-04-20 17:22:23:957 3308 9e8 COMAPI WARNING: ISusInternal::RemoveService failed, hr=80248014
2014-04-20 17:22:25:939 576 2484 Report REPORT EVENT: {D1B660E1-6D7E-4434-A011-F61B74BFDEF5} 2014-04-20 17:22:20:939-0700 1 182 101 {B78C39B2-C915-4F8C-9780-23F71C14A560} 501 80070643 wusa Failure Content
Install Installation Failure: Windows failed to install the following update with error 0x80070643: Update for Windows (KB974405).
2014-04-20 17:22:25:947 576 2484 Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
2014-04-20 17:22:25:947 576 2484 Report WER Report sent: 7.5.7601.17514 0x80070643 B78C39B2-C915-4F8C-9780-23F71C14A560 Install 101 Unmanaged
2014-04-20 17:22:25:947 576 2484 Report CWERReporter finishing event handling. (00000000)

Windows Identity Foundation no more available? No Dynamicy CRM working?

Hi,
I am testing Windows 10 TP. I tried to configure Dynamics CRM but it crashes with the exception: "Could not load file or assembly Microsoft.IdentityModel".
The Internet says that I have to install the Feature "Windows Identity Foundation", but this is not listed under Windows 10 TP Features.
Any suggestions?
Regards
Thomas

If installing .NET 4.5 doesn't work, then there is no way to install this functionality. Someone mentioned a workaround, which is to copy the DLL files from a Windows 8.1 install to the Windows 10 install, but there's nothing built in
right now.
The WIF libraries were moved into the base install of .NET 4.5, that's why I suggested installing .NET 4.5 and seeing what happens. If that doesn't work, then either 1) you'll need to wait until Microsoft updates Win 10 with the ability to install
this feature, or 2) copy the DLLs from a Windows 8.1 install of WIF.
Hope that helps!

Windows Server 2012: Installing Windows Identity Foundation runtime

Hello!
I'm trying to install Windows Identity foundation runtime (Windows6.1-KB974405-x64.msu) on a Server 2012 Standard and keep getting this error:
This package installs properly on my Windows 7 prof workstation.
Thank you in advance,
Michael

Hello,
Any reason not to use the following?
(Powershell)
Add-WindowsFeaturewindows-identity-foundation
Regards
MCITP: Enterprise Messaging Administrator 2010 MCTS: Lync Server 2010, Configuring MCSE

Unable Windows Identity Foundation in Windows 10 TP

Hi all,
This question has been asked before but I've yet to see anyone describe the exact steps they have attempted to resolve the issue.
Microsoft Dynamics AX 2012 R2 client has a dependency upon Windows Identify Foundation being installed / option enabled.
WIF is not able to be installed on Windows 10 TP as an executable, the same as Windows 8. However, the option to manually register the DLL using the
gacutil option is not working either.
I have also attempted to resolve by running the same PowerShell command line that the AX installer uses to configure WIF.
C:\Program Files\Microsoft SDKs\Windows\v7.0\Bin>gacutil /i "C:\Program Files\Reference Assemblies\Microsoft\Windows Identity Foundation\v3.5\Microsoft.IdentityModel.dll"
Microsoft (R) .NET Global Assembly Cache Utility. Version 3.5.30729.1
Copyright (c) Microsoft Corporation. All rights reserved.
Assembly successfully added to the cache
PS C:\WINDOWS\system32> Enable-WindowsOptionalFeature -Online -FeatureName Windows-Identity-Foundation
Enable-WindowsOptionalFeature : Feature name Windows-Identity-Foundation is unknown.
At line:1 char:1
+ Enable-WindowsOptionalFeature -Online -FeatureName Windows-Identity-F ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Enable-WindowsOptionalFeature], COMException
+ FullyQualifiedErrorId : Microsoft.Dism.Commands.EnableWindowsOptionalFeatureCommand
Thanks,
Kieran.

Hi all,
This question has been asked before but I've yet to see anyone describe the exact steps they have attempted to resolve the issue.
Microsoft Dynamics AX 2012 R2 client has a dependency upon Windows Identify Foundation being installed / option enabled.
WIF is not able to be installed on Windows 10 TP as an executable, the same as Windows 8. However, the option to manually register the DLL using the
gacutil option is not working either.
I have also attempted to resolve by running the same PowerShell command line that the AX installer uses to configure WIF.
C:\Program Files\Microsoft SDKs\Windows\v7.0\Bin>gacutil /i "C:\Program Files\Reference Assemblies\Microsoft\Windows Identity Foundation\v3.5\Microsoft.IdentityModel.dll"
Microsoft (R) .NET Global Assembly Cache Utility. Version 3.5.30729.1
Copyright (c) Microsoft Corporation. All rights reserved.
Assembly successfully added to the cache
PS C:\WINDOWS\system32> Enable-WindowsOptionalFeature -Online -FeatureName Windows-Identity-Foundation
Enable-WindowsOptionalFeature : Feature name Windows-Identity-Foundation is unknown.
At line:1 char:1
+ Enable-WindowsOptionalFeature -Online -FeatureName Windows-Identity-F ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Enable-WindowsOptionalFeature], COMException
+ FullyQualifiedErrorId : Microsoft.Dism.Commands.EnableWindowsOptionalFeatureCommand
Thanks,
Kieran.

Windows 10 and Dynamics CRM 2013 Outlook Client - Identity Foundation missing

How can I install/activate the Identity Foundation in Windows 10.
In Control Panel\All Control Panel Items\Programs and Features the feature is missing.
Dynamics CRM 2013 (and 2011) Outlook Client does need the Identity Foundation:
Error is "Could not load file or assembly 'Microsoft.Identity.Model, Version=3.5.0.0 ...
icomedias Austria - Germany

I've had the same problem with the CRM 2011 Plug-in.. It is not possible to install the Windows Identity Framework onto Windows 10 since it was not included as an option in the "Features" menu.
Also - I found this forum entry discussing that exact problem (with no answer, so far):
Windows Identity Foundation not working with Technical Preview
EDIT: Fixed link. Inside of the linked discussion thread, I see this:
"From Windows 8.1 Features Screen:
WIF 3.5 has been superseded by WIF classes that are provided as part of .NET 4.5. It is recommended that you use .NET 4.5 for supporting claims-based identity in your applications.
so i guess they removed it completely in Windows TP"

ERROR: Could not retrieve a valid windows identity

When I try to create PowerView reports from BISM connection file, I get error:
<MoreInformation>
<Source>Microsoft.ReportingServices.ProcessingCore</Source>
<Message msrs:ErrorCode="rsErrorOpeningConnection" msrs:HelpLink="http://go.microsoft.com/fwlink/?LinkId=20476&EvtSrc=Microsoft.ReportingServices.Diagnostics.Utilities.ErrorStrings&EvtID=rsErrorOpeningConnection&ProdName=Microsoft%20SQL%20Server%20Reporting%20Services&ProdVer=11.0.3000.0"
xmlns:msrs="http://www.microsoft.com/sql/reportingservices">Cannot create a connection to data source 'TemporaryDataSource'.</Message>
<MoreInformation>
<Source>Microsoft.AnalysisServices.AdomdClient</Source>
<Message/>
<MoreInformation>
<Source>Microsoft.SharePoint</Source>
<Message>Could not retrieve a valid Windows identity.</Message>
<MoreInformation>
<Source>mscorlib</Source>
<Message>WTS0003: The caller is not authorized to access the service.</Message>
</MoreInformation>
</MoreInformation>
</MoreInformation>
</MoreInformation>
From SharePoint logs: I get following exception details:
01/02/2013 11:00:34.17            w3wp.exe (0x0828)        0x2AEC SharePoint Foundation Claims Authentication
bz7l        Medium
SPSecurityContext: Could not retrieve a valid windows identity for username 'DOMAIN\user' with UPN 'user@domain'. UPN is required when Kerberos
constrained delegation is used. Exception: System.ServiceModel.EndpointNotFoundException: The message could not be dispatched because the service at the endpoint address 'net.pipe://localhost/s4u/022694f3-9fbd-422b-b4b2-312e25dae2a2' is unavailable for the
protocol of the address.    Server stack trace:      at System.ServiceModel.Channels.ConnectionUpgradeHelper.DecodeFramingFault(ClientFramingDecoder decoder, IConnection connection, Uri via, String contentType, TimeoutHelper&
timeoutHelper)     at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.SendPreamble(IConnection connection, ArraySegment`1 preamble, TimeoutHelper& timeoutHelper)     at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.DuplexConnectionPoolHelper.AcceptPooledConnection(IConnection
connection, TimeoutHelper& timeoutHelper)     at System.ServiceModel.Channels.ConnectionPoolHelper.EstablishConnection(TimeSpan timeout)     at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.OnOpen(TimeSpan
timeout)     at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)     at System.ServiceModel.Channels.ServiceChannel.OnOpen(TimeSpan timeout)     at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan
timeout)     at System.ServiceModel.Channels.ServiceChannel.CallOnceManager.CallOnce(TimeSpan timeout, CallOnceManager cascade)     at System.ServiceModel.Channels.ServiceChannel.EnsureOpened(TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)     at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage
methodCall, ProxyOperationRuntime operation)     at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)    Exception rethrown at [0]:      at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage
reqMsg, IMessage retMsg)     at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)     at Microsoft.IdentityModel.WindowsTokenService.S4UClient.IS4UService_dup.UpnLogon(String
upn, Int32 pid)     at Microsoft.IdentityModel.WindowsTokenService.S4UClient.CallService(Func`2 contractOperation)     at Microsoft.SharePoint.SPSecurityContext.GetWindowsIdentity().
a1bef09b-025a-208e-cd5e-4ef6678b6d0d
Any help on how to get this resolved would be greatly appreciated.

Hi GuYuming
I have already read the mentioned blog. Code mentioned there gives me the following output.
I have already verified that the c2WTS service is running and it's dependency 'Cryptographic services' is also running.
Where is the root cause? How can I resolve this?
Output of the code on the mentioned blog:
Testing Service c2WTS
+- Service c2WTS found
+- Service c2WTS is running
+- Path of service: C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe
+- Config File: C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe.config
+- Service Logon: SYSTEM\NT AUTHORITY
----- start of config file ----
<?xml version="1.0"?>
<configuration>
<configSections>
<section name="windowsTokenService" type="Microsoft.IdentityModel.WindowsTokenService.Configuration.WindowsTokenServiceSection, Microsoft.IdentityModel.WindowsTokenService, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35"
/>
</configSections>
<startup>
<supportedRuntime version="v4.0" />
<supportedRuntime version="v2.0.50727" />
</startup>
<windowsTokenService>

<allowedCallers>
<clear />
<add value="WSS_WPG" />
</allowedCallers>
</windowsTokenService>
</configuration>
----- end of config file ----
Retrieving security groups/users allowed to use the service from config file
+- WSS_WPG
Trying to login .........
Using current Windows Credentials
***** c2WTS could not provide a valid Windows Token. Reason: WTS0003: The caller is not authorized to access the service.
Server stack trace:
at System.ServiceModel.Channels.ServiceChannel.ThrowIfFaultUnderstood(Message reply, MessageFault fault, String action, MessageVersion version, FaultConverter faultConverter)
at System.ServiceModel.Channels.ServiceChannel.HandleReply(ProxyOperationRuntime operation, ProxyRpc& rpc)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at Microsoft.IdentityModel.WindowsTokenService.S4UClient.IS4UService_dup.UpnLogon(String upn, Int32 pid)
at Microsoft.IdentityModel.WindowsTokenService.S4UClient.<>c__DisplayClass1.<UpnLogon>b__0(IS4UService_dup channel)
at Microsoft.IdentityModel.WindowsTokenService.S4UClient.CallService(Func`2 contractOperation)
at c2WTSTest.Form1.button2_Click(Object sender, EventArgs e)
Now Verifying if user DOMAIN/monish has rights on c2WTS
+- User DOMAIN/monish has no access to the service
*** Analysis Complete ***
Monish Gupta

Claims debacle (error) with Term Store: "Could not retrieve a valid windows identity" for all sites in a particular web app.

When I pull up the Term store in CA or any MySite collection, it works.
When I do so in any other site collection (HNSCs, incidentally), It doesn't return any term stores.
My ULS log immediately before and after the "/_vti_bin/taxonomyinternalservice.json/CheckPermission" POST on termstore .aspx triggers the WCF call:
Claims Authentication af30y Verbose Claims Windows Sign-In: Successfully signed-in the the user 'contoso\domainUser' for request url 'https://sp13-root-prd.contoso.com/_vti_bin/taxonomyinternalservice.json/CheckPermission'.
Claims Authentication af30q Verbose Updating header 'LOGON_USER' with value '0#.w|contoso\domainUser' for the request url 'https://sp13-root-prd.contoso.com/_vti_bin/taxonomyinternalservice.json/CheckPermission'.
Authentication Authorization agb9s Medium Non-OAuth request. IsAuthenticated=True, UserIdentityName=0#.w|contoso\domainUser, ClaimsCount=77
Logging Correlation Data xmnv Medium Site=/
Topology e5mc Medium WcfSendRequest: RemoteAddress: 'http://CONTOSOFE3:32843/00e6d55691824965ac223f1d1cfae6d2/MetadataWebService.svc' Channel: 'Microsoft.SharePoint.Taxonomy.IMetadataWebServiceApplication' Action: 'http://schemas.microsoft.com/sharepoint/taxonomy/soap/IDataAccessReadOnly/GetChanges2' MessageId: 'urn:uuid:590e916c-c89a-4f89-9819-a82c97fabcaa'
Claims Authentication bz7l Medium SPSecurityContext: Could not retrieve a valid windows identity for username 'contoso\domainUser' with UPN '[email protected]'. UPN is required when Kerberos constrained delegation is used. Exception: System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]: WTS0003: The caller is not authorized to access the service. (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is: System.UnauthorizedAccessException: WTS0003: The caller is not authorized to access the service. at Microsoft.IdentityModel.WindowsTokenService.CallerSecurity.CheckCaller(WindowsIdentity callerIdentity) at Microsoft.IdentityModel.WindowsTokenService.S4UServiceContract.PerformLogon(Func`1 logonOperation, Int32 pid) at SyncInvokeUpnLogon(Object , Object[] , Object[] ) at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]& outputs) at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage31(MessageRpc& rpc) at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet))..
Claims Authentication g220 Unexpected No windows identity for contoso\domainUser.
The "The caller is not authorized to access the service." message seems pertinent.
Both web apps are using only NTLM auth.
The url for both web apps ends in the same contoso.com domain.
I get the same errors no matter what account I use, including the install account.
Things I've tried:
Deleting and building a new HNSC root web app and site. Error happens in all sites in all web apps except the PBSC hosting MySites.
Giving the root site app pool identity full control of the metadata service app (even though the MySite identitiy doesn't have it)
Giving the root site app pool identity full permissions on the metadata service app.
Comparing database and web app config permissions between dev (where everything works perfectly) and prod (where it does not).
Made sure IIS auth settings on both sites are identical
Both sites are using the same SSL certificate (though the call to the web service appears to be http)
Reprovisioned the metadata service app with a new database and new app pool identity.
Made sure C2WT is running. Tried it with the service stopped as well.
Web.configs are identical between working and non-working apps.
I'm stumped but still Googling. I'm hoping to avoid having to call Micrososft. Any help would be appreciated!
UPDATE:
Interestingly, when I restored the web application from backup (via CA), I ended up with 3 identical "Windows Authentication" authentication providers assigned to the problem web app. Since there was more than one, I was directed to the provider-chooser
page when visiting the site. Upon choosing 1 of the 3, I was authenticated, and *poof*, no more authentication errors and the term store loaded term sets as expected.
Of course, 3 providers was not an ideal state, so I grabbed the one that worked (#1) via get-spauthenticationprovider, and assigned it to the web app via set-spwebapplication, and my problem returned.
I am currently updating the farm to SP1 from June 2013 CU. Fingers crossed.
Update:
The update to SP1 went smoothly, but did not resolve the issue. Also related (I believe) are the random authentication errors when trying to upload images to some libraries, and 401-errors on the accessdenied.aspx page itself.
Update:
The problem is resolved, seemingly after making 4 changes. I'm trying to narrow down which change was the cure, if any:
I installed SP1 on all 6 servers, rebooted and upgraded. This appeared to have no effect.
Removed an old login from SQL that no longer existed in AD because of this ULS error:
System.Runtime.InteropServices.COMException: The user or group contoso\svc_xxxxxxxxx' is unknown., StackTrace: at Microsoft.SharePoint.Utilities.SPUtility.GetFullNameFromLoginEx(String loginName, Boolean&
bIsDL)
This login was the identity of the application pool that used to run the web app in question.
This login was the schema owner of a schema named after itself on every SharePoint database so I changed the schema owner to dbo but left the schema attached.
The problem may have surfaced initially when the app pool identity was changed in CA, but went unnoticed?
Note that the web app had been deleted and recreated many times with a new identity and pool to no avail, but the URL remained the same throughout each attempted fix. Relevant?
Grasping at straws, I changed the app pool identity for this web app to the same one that runs the MySite web app pool as per this only slightly related problem: http://www.planetsharepoint.org/m/preview.php?id=372&rid=34764&author=Vlad+Catrinescu
I changed the authentication method from NTLM to Negotiate.
I am rolling back #3 and #4 to see if the issue resurfaces.
Update:
It doesn't appear to have been the NTLM/Negotiate setting. Web app is currently set to NTLM and all is well. No strange accessdenies, and term Store is still manageable from all sites.
Update: Sorry for the delay. I am administering 6 farms these days. Will update as soon as the final phase of rollbacks happens.
I think I can. I think I can.

maybe that web app was accidentally created with classic auth?
here's an example of how to create claims based, with classic, and then "doing 2013" claims
#Create the example web application, as mentioned above, either with gui, and pick later, or
New-SPWebApplication-ApplicationPool$applicationPool-ApplicationPoolAccount$serviceAcct-Name$WebApp-Port
5050
-databaseName$contentDB-securesocketslayer
#If doing for 2013
New-SPWebApplication-ApplicationPool$applicationPool-ApplicationPoolAccount$serviceAcct-Name$WebApp-Port
5050
-AuthenticationProvider(new-spauthenticationprovider)
-databaseName$contentDB-secureSocketsLayer

Window Workflow foundation instance clear after redeployment in window azure

Iv developed workflow with .netframework 4.5 , the worflow works properly on my
windows 7 machine but when i published it on windows azure it worked fine but when i published new version it gets this error
The execution of an InstancePersistenceCommand was interrupted because the instance
key '' was not associated to an instance. This can occur because the instance or key has been cleaned up, or because the key is invalid. The key may be invalid if the message it was generated from was sent at the wrong time or contained incorrect correlation
data

Hi,
Build-time validation :
In .NET Framework 4, workflow validation errors weren’t counted as build errors during the build of a workflow project. This meant that building a workflow project could succeed even when there were workflow validation errors. In .NET Framework 4.5, workflow
validation errors cause the build to fail.
I suggest you to follow the below article for information on Windows Workflow Foundation in .NET 4.5
https://msdn.microsoft.com/en-us/library/hh305677(v=vs.110).aspx
Hope this helps !
Regards,
Sowmya

Windows Communcation Foundation - JSR 172 Web Stub - interoperability

Hi! I am just playing with WCF -Windows Communication Foundation and JSR 172 Web Stub generation utility of WTK 2.5beta - is there a known problem with the import-expression i XML?
WCF generates:
?wsdl -> web service descrption that has import- references to
<?xml version="1.0" encoding="utf-8" ?>
- <wsdl:definitions name="EchoService" targetNamespace="http://tempuri.org/" xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/" xmlns:tns="http://tempuri.org/" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" xmlns:i0="http://schemas.microsoft.com/ws/2005/02/mex/bindings" xmlns:wsap="http://schemas.xmlsoap.org/ws/2004/08/addressing/policy" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msc="http://schemas.microsoft.com/ws/2005/12/wsdl/contract" xmlns:wsaw="http://www.w3.org/2006/05/addressing/wsdl" xmlns:soap12="http://schemas.xmlsoap.org/wsdl/soap12/" xmlns:wsa10="http://www.w3.org/2005/08/addressing" xmlns:wsx="http://schemas.xmlsoap.org/ws/2004/09/mex">
<wsdl:import namespace="http://schemas.microsoft.com/ws/2005/02/mex/bindings" location="http://localhost:8080/echo?wsdl=wsdl0" />
- <wsdl:types>
- <xsd:schema targetNamespace="http://tempuri.org/Imports">
<xsd:import schemaLocation="http://localhost:8080/echo?xsd=xsd0" namespace="http://tempuri.org/" />
<xsd:import schemaLocation="http://localhost:8080/echo?xsd=xsd1" namespace="http://schemas.microsoft.com/2003/10/Serialization/" />
</xsd:schema>
</wsdl:types>
+ <wsdl:message name="IEchoService_Echo_InputMessage">
<wsdl:part name="parameters" element="tns:Echo" />
</wsdl:message>
- <wsdl:message name="IEchoService_Echo_OutputMessage">
<wsdl:part name="parameters" element="tns:EchoResponse" />
</wsdl:message>
- <wsdl:portType name="IEchoService">
- <wsdl:operation name="Echo">
<wsdl:input wsaw:Action="http://tempuri.org/IEchoService/Echo" message="tns:IEchoService_Echo_InputMessage" />
<wsdl:output wsaw:Action="http://tempuri.org/IEchoService/EchoResponse" message="tns:IEchoService_Echo_OutputMessage" />
</wsdl:operation>
</wsdl:portType>
- <wsdl:service name="EchoService">
- <wsdl:port name="MetadataExchangeHttpBinding_IEchoService" binding="i0:MetadataExchangeHttpBinding_IEchoService">
<soap12:address location="http://localhost:8080/echo" />
- <wsa10:EndpointReference>
<wsa10:Address>http://localhost:8080/echo</wsa10:Address>
</wsa10:EndpointReference>
</wsdl:port>
</wsdl:service>
</wsdl:definitions>?wsdl=wsdl0
?xsd=xsd0
?xsd=xsd1Anyone experienced the same problem and knows a solution ?
Henning

I have gotten a step futher! The emulator had to be configured to run in the "secure" domain (as mentioned by some other people here), otherwise a http response "400 bad request (invalid header name)" was produced. J2ME web service is interoperable with WCF basichttpbinding (without debugging becuase it inserts unparseable soap-code into the http response)

Windows Communication Foundation .svc versus .asmx

.NET 3.5 and above allow programmer to create Windows Communication Foundation that has the .svc file. I can use this WCF like a Web services on .Net C# and VB.NET without issues. I can also access what has been created on the browser (http://server1/DemoWebServices/Demo.svc?wsdl).
However, when I go to LabView 8.6.1, it can only allowed import of asmx?wsdl Web services.
Does that mean labview does not play with .svc?wsdl ?
If not supported, would other Labview version allowed that support.

Unfortunately, at this point it appears only asmx?wsdl Web Services are supported. If you can convert between formats, that may be your best solution.
Regards,
Mike S
NI AE

WCF- ( Windows communication Foundation ) New standard for webservice

Dear Friends,
Could anybody tell me whether we can call a WCF service from SAP PI?
WCF (Windows communication Foundation) can be considered as a new standard for webservice.
Take care,
Karthik..k

as of now only file with wsdl extention is supported,

No windows identity for Domain Name\User

I have recently upgraded SharePoint 2013 farm from RTM to SP1. I am repeatedly getting errors No windows
identity for Domain Name\User in ULS log. Some users who was earlier able to access to site is not able to access site.
Please remember to mark the replies as answers or vote as helpful if they help.

Few questions to quickly check with you..
1. Have you re-run your SharePoint Configuration Wizard after you upgraded from RTM to SP1? Its very important to re-run SharePoint Configuration Wizard to ensure SharePoint Config DB is updated with latest changes in the farm.
2. If you have performed the above step but still face issues, have you restarted your SharePoint Server after re-running your SharePoint Configuration Wizard? If not please restart the server.
3. If not anyone of the above, then have you changed your authentication type for your web application in Central Admin. Example, from Classic Authentication to Claim Based Authentication?
Please remember to click 'Mark as Answer' if the reply answers your query or 'Upvote' if it helps you.

What does 'media.windows-media-foundation.enabled' do?

I disabled media.windows-media-foundation.enabled in order to get .mp3/mp4 to stop playing in firefox, but rather prompt me to open/save as. It works fine. However, the place where I found this solution said it was going to break some embedded playback functionality.. or something.
Vimeo still works, HTML5 Youtube still works, Vine still works. I'm not sure what is supposed to break, and I *KNOW* I'm going to find it eventually and completely forget that I ever did this. Can anyone explain what is supposed to stop working?
Thanks! :)

Media Foundation is used to decode MPEG media, such as MP3 and MP4. Many sites that feature HTML5 are using alternative formats such as WebM that are not patented.
I think you might occasionally have a problem on some sites. For example, the site might only offer MPEG media in its HTML5 player and use a script that doesn't test carefully and provide an alternative (e.g., Flash player media) for browsers that do not support MPEG media. But... hopefully not too many sites.

Windows identity foundation

Similar Messages

Maybe you are looking for