Hi everybody,
My current environment include:
+ One hybrid environment use for testing
+ One hybrid environment use for end-user (production)
+ On-cloud environment (external partner)
I'm create an organization relationship between hybrid environment (test) and external partner. Everything is OK, external user can view free/busy calendar of on-premise user in hybrid environment (test). When i'm running command Test-OrganizationRelationship,
the result is OK for all step
I do the same with production environment. In early November, everything is OK, external user can view free/busy calendar of on-premise user in hybrid environment (production). However about two weeks later, i ran the Test-OrganizationRelationship in exchange
online powershell on external partner environment and got the following error:
Test-OrganizationRelationship -Identity "XXXX" -UserIdentity "userA@contoso.com"
Begin testing for organization relationship CN=XXXX,CN=Federation,CN=Configuration,CN=contoso.com,CN=ConfigurationUnits,DC=XXXX,DC=PROD,DC=OUTLOOK,DC=COM, enabled state True.
Exchange D-Auth Federation Authentication STS Client Identities are urn:federation:MicrosoftOnline/outlook.com;uri:WindowsLiveID/outlook.com;
STEP 1: Validating user configuration
RESULT: Success.
STEP 2: Getting federation information from remote organization...
RESULT: Success.
STEP 3: Validating consistency in returned federation information
RESULT: Success.
STEP 4: Requesting delegation token from the STS...
RESULT: Error.
LAST STEP: Writing results...
RunspaceId : 71a98451-5d51-49a4-ad27-fe91c61cb1a5
Identity :
Id : FailureToGetDelegationToken
Status : Error
Description : Failed to get delegation token: <S:Fault xmlns:S="http://www.w3.org/2003/05/soap-envelope"><S:Code><S:Value>S:Sender</S:Value><S:Subcode><S:Value>wst:FailedAuthentication</S:Value></S:Subcode></S:Code><S:Reason><S:Text
xml:lang="en-US">Authentication
Failure</S:Text></S:Reason><S:Detail><psf:error xmlns:psf="http://schemas.microsoft.com/Passport/SoapServices/SOAPFault"><psf:value>0x80048800</psf:value><psf:internalerror><psf:code>0x80048800</psf:code><psf:text>AADSTS901124:
Application
'fydibohf25spdlt.XXXX' does not exist.</psf:text></psf:internalerror></psf:error></S:Detail></S:Fault>
Microsoft.Exchange.Net.WSTrust.SoapFaultException: Soap fault exception received.
at Microsoft.Exchange.Net.WSTrust.SoapClient.Invoke(IEnumerable`1 headers, XmlElement bodyContent)
at Microsoft.Exchange.Net.WSTrust.SecurityTokenService.IssueToken(DelegationTokenRequest request, XmlTextWriter debugStream)
at Microsoft.Exchange.Management.Sharing.TestOrganizationRelationship.GetDelegationToken().
IsValid : True
ObjectState : New
COMPLETE.
I see that the federation trust in hybrid environment for production does not exist. I try to run the following command but the error still didn't fix:
Get-FederationTrust | Set-FederationTrust –RefreshMetadata
The question is: How to fix error federation trust does not exist? (AADSTS901124: Application 'fydibohf25spdlt.XXXX' does not exist)