ADFS authentication is broken due to renewed certificate and STS is not working

Question

it all started with this .... Error Code: 5000811 Message: Unable to verify token signature. The signing key identifier does not match any valid registered keys. users are unable to use SSO to login to SharePoint, Scan to email is broken and many other trickle down items including Office 365. Steps on updating in ADFS the Relying third party trusts > MS office 365 ID platform - because if i try to TEST the URL - i get and erro to verify proxy server setting....as the URL is apparently not valid?

Answer 1

@Michaela Parlin

Thank you for reaching out to us, looks like certificate got rollover on ADFS due to which there is mismatch info of certificates on ADFS/Microsoft Entra ID.

Refer to this article - https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-fed-o365-certs it has the steps to update the certificate from ADFS to Microsoft Entra ID, while running this command connect-msolservice use a non-federated Global Admin account (cloud only account) to update the details.

Let me know if you have any further questions, feel free to post back.

Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.