Log Name:      AD FS/Admin
Source:        AD FS
Date:          21/5/2015 4:02:49 PM
Event ID:      321
Task Category: None
Level:         Error
Keywords:      AD FS
User:          Domain\UCADFSAdmin
Computer:      SINCCBAP12P02.Domain.com.sg
Description:
The SAML authentication request had a NameID Policy that could not be satisfied. 
Requestor: ISIN2022.Domain.COM.SG 
Name identifier format: urn:oasis:names:tc:SAML:2.0:nameid-format:transient 
SPNameQualifier: ISIN2022.Domain.COM.SG 
Exception details: 
MSIS7070: The SAML request contained a NameIDPolicy that was not satisfied by the issued token. 
Requested NameIDPolicy: AllowCreate: True Format: urn:oasis:names:tc:SAML:2.0:nameid-format:transient SPNameQualifier: ISIN2022.Domain.COM.SG. Actual NameID properties: Format: urn:oasis:names:tc:SAML:2.0:nameid−format:transientoasis:names:tc:SAML:2.0:nameid−format:transient, NameQualifier: http://adfs.Domain.com.sg/adfs/com/adfs/services/trust SPNameQualifier: ISIN2022.Domain.COM.SG, SPProvidedId: . 

This request failed. 



User Action 
Use the AD FS Management snap-in to configure the configuration that emits the required name identifier.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="AD FS" Guid="{2FFB687A-1571-4ACE-8550-47AB5CCAE2BC}" />
    <EventID>321</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000001</Keywords>
    <TimeCreated SystemTime="2015-05-21T08:02:49.094522400Z" />
    <EventRecordID>57</EventRecordID>
    <Correlation ActivityID="{00000000-0000-0000-1200-0080050000E9}" />
    <Execution ProcessID="6728" ThreadID="5716" />
    <Channel>AD FS/Admin</Channel>
    <Computer>SINCCBAP12P02.Domain.com.sg</Computer>
    <Security UserID="S-1-5-21-220523388-484763869-1801674531-197895" />
  </System>
  <UserData>
    <Event xmlns="http://schemas.microsoft.com/ActiveDirectoryFederationServices/2.0/Events">
      <EventData>
        <Data>ISIN2022.Domain.COM.SG</Data>
        <Data>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</Data>
        <Data>ISIN2022.Domain.COM.SG</Data>
        <Data>MSIS7070: The SAML request contained a NameIDPolicy that was not satisfied by the issued token. Requested NameIDPolicy: AllowCreate: True Format: urn:oasis:names:tc:SAML:2.0:nameid-format:transient SPNameQualifier: ISIN2022.Domain.COM.SG. Actual NameID properties: Format: urn:oasis:names:tc:SAML:2.0:nameid−format:transientoasis:names:tc:SAML:2.0:nameid−format:transient, NameQualifier: http://adfs.Domain.com.sg/adfs/com/adfs/services/trust SPNameQualifier: ISIN2022.Domain.COM.SG, SPProvidedId: .</Data>
      </EventData>
    </Event>
  </UserData>
</Event>