196 Novell Access Manager 3.1 SP1 Identity Server Guidenovdocx (en) 19 February 20104 Verify that you can access the SharePoint server.If you only see a page that says “Server Error in '/adfs' Application”, see “Turning On Loggingon the ADFS server” on page 196 and follow the instructions in “Common Errors” onpage 196.7.1.4 Troubleshooting “Turning On Logging on the ADFS server” on page 196 “Common Errors” on page 196Turning On Logging on the ADFS serverIf you keep getting “Server Error in '/adfs' Application” displayed in the client's browser, the bestplace to look for the cause is in the ADFS log file.To turn on this log file:1 In the Active Directory Federation Services console, right-click Federation Service, then clickProperties.2 Click the Troubleshooting tab, then enable everything on the page.3 Look for the file that is created after clicking OK in the path listed in the Log files directory.4 Look in that file for reasons that the federation is failing.For an explanation of some of the common errors, see “Common Errors” on page 196.Common Errors “[ERROR] SamlViolatesSaml:” on page 196 “[ERROR] Saml contains an unknown NameIdentifierFormat:” on page 196 “CRL Errors” on page 197 “[ERROR] EmailClaim.set_Email:” on page 197[ERROR] SamlViolatesSaml:Error parsing AuthenticationMethod: Invalid URI: The format of the URI could not be determined.Cause: This is because the contract says name/password/uri rather than something that starts with aurn: or http://. Change the contract and try again.[ERROR] Saml contains an unknown NameIdentifierFormat:Issuer=https://idp-51.amlab.net:8443/nidp/wsfed/; Format=urn:oasis:names:tc:SAML:1.1:nameid-format:unspecifiedCause: the name identifier format is set to unspecified, but it needs to be E-mail[ERROR] Saml contains an unknown Claim name/namespace:Issuer=https://idp-51.amlab.net:8443/nidp/wsfed/;Namespace=urn:oasis:names:tc:SAML:1.0:assertion; Name=emailaddress
