I provide Tokens to ACS using ADFS 2.0 STS (STS A). When I try to login to ACS Portal using the ADFS Claims Provider I end up with an Error:
Message ACS20001: An error occurred while processing a WS-Federation sign-in response.
Inner Message ACS50008: SAML token is invalid.
Inner Message ACS50017: The Certificate with Subject [MySigning Cert Subjetct] faild validation
Since I use Certificats form my internal CA for Token Signing & Decryption, the message seems to be clear: ACS cannot Access CRL CDP and/or AIA.
But both CRL CDP and AIA definetly ARE accessible from outside using http.
Federation between STS A and other Test-Instance of ADFS works well. I'v got onle problems with ACS.
You can find my signing-cert on: http://rootcerts.cus.teststs.ch/Signing_Cert.crt
thanks for any help
Pirmin