Share via

Event ID 694 — AD FS Claim Transform Module

  • Article

Applies To: Windows Server 2008

You can use a claim transform module when existing claim rules are not sufficient to generate claims that meet user requirements. You configure a claim transform module in the custom module settings in the trust policy.

Event Details

Product: Windows Operating System
ID: 694
Source: Microsoft-Windows-ADFS
Version: 6.0
Symbolic Name: RemotingConfigFileChanged
Message: The remote configuration file for a claim transform module has changed.

Because Microsoft .NET Remoting was already configured, these changes cannot be applied. The previous remoting configuration will remain in effect.

User Action
To use the new remoting configuration, restart Internet Information Services (IIS).

Resolve

Restart Internet Information Services

To use the new remoting configuration, restart Internet Information Services (IIS).

To perform this procedure, you must be a member of the local Administrators group, or you must have been delegated the appropriate authority.

To restart IIS:

  1. On the federation server, click Start, and then click Command Prompt.

  2. Type the following command, and then press ENTER:

    iisreset

  3. Close the command prompt.

Verify

You use Active Directory Federation Services (AD FS) claim transform modules to modify claim names and values as they pass through the federation server. If you experience problems running a claim transform module, verify that the settings in the trust policy are configured appropriately.

To perform these procedures, you must be a member of the local Administrators group, or you must have been delegated the appropriate authority.

To verify trust policy settings for a claim transform module:

  1. On the federation server whose transform module you want to change, click Start, point to Administrative Tools, and then click Active Directory Federation Services.
  2. Double-click Federation Service, right-click Trust Policy, and then click Properties.
  3. In the Trust Policy Properties dialog box, click the right arrow to scroll to the Transform Module tab, and then click the Transform Module tab.
  4. In DLL file, verify that the path to the dynamic-link library (DLL) file is correct.
  5. In Class name, verify that the namespace-qualified class name that the transform module will use is correct.

Also, in your AD FS scenario, click the Uniform Resource Locator (URL) of the configured Web server from the client computer, and the use the following procedure to check certain particular events.

To verify event details for a claim transform module:

  1. On the account federation server, click Start, point to Administrative Tools, and then click Event Viewer.

  2. Click Security, and in the details pane of the Success Audit events, locate Event ID 10550.

    This event provides the details of the claims that have been sent by the account partner. Look for claims that are supposed to be modified by the custom claim transform module. If the modified claims are listed in the event, the claim transform module should work properly.

AD FS Claim Transform Module

Active Directory Federation Services