| Event Id | 623 |
| Source | Microsoft-Windows-ADFS |
| Description | The Federation Service encountered an error while loading the trust policy. The trust policy field '%1' was set to an unacceptable value. The field must not be negative. Field: %1 Value: %2 If this error occurs during startup of the Federation Service, the Federation Service will be not be able to start, and all requests to the Federation Service will fail until the configuration is corrected. If this error occurs while the Federation Service is running, the Federation Service will continue to use the last trust policy that was loaded successfully. User Action Correct the '%1' field by configuring it with a nonnegative value. |
| Event Information | According to Microsoft : Cause : This event is logged when the Federation Service encountered an error while loading the trust policy. Resolution : Modify any negative integer values in the trustpolicy.xml file Modify any negative integer values, if any, in the trust policy (trustpolicy.xml) file to be nonnegative. Common values to check for in the trustpolicy.xml file include Trust policy version, Token lifetime (minutes), Realm cookie lifetime (days), and Token cache capacity . To perform this procedure, you must be a member of the local Administrators group, or you must have been delegated the appropriate authority. To check for negative integer values in the trustpolicy.xml file:
Verify that you can access the Active Directory Federation Services (AD FS)-enabled application from a client browser and that the resource can be accessed. |
| Reference Links | Event ID 623 from Source Microsoft-Windows-ADFS |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.