登录Outlook失败，出现ADD错误 [英] Login Outlook failed with ADD errors

问题描述

在企业环境中的Outlook登录失败. Outlook在加载配置文件步骤中停留了很长时间.试图切换office365，交换但没有运气.在搜索原因之后，最终定位问题可能与AAD本身有关.这是错误 在发泄日志中:

Login in outlook in enterprise environment failed. Outlook stuck at loading profile step for a long time. Tried to switch office365, exchange but with no luck. After search the reasons, final locate the issue may relative to AAD itself. Here are the errors in the vent log:

错误:0xCAA90022无法发现集成Windows身份验证的终结点.检查您的ADFS设置.它应支持WS-Trust 1.3的集成寡妇身份验证.
在aggregatedtokenrequest.cpp上，类型为类异常"的异常，行:362，方法:AggregatedTokenRequest :: LoadMex.

日志:0xcaa10080加载MEX文档失败.
登录到aggregatedtokenrequest.cpp，行:379，方法:AggregatedTokenRequest :: LoadMex.

请求:权限:https://login.microsoftonline.com/common，客户端:d3590ed6-52b3-4102-aeff-aad2292ab01c，重定向URI:ms-appx-web://Microsoft.AAD.BrokerPlugin/d3590ed6-52b3-4102 -aeff-aad2292ab01c，资源:https://officeapps.live.com，相关ID(请求): 8c5f79ad-b220-47d3-876d-c1eab360bc11

Error: 0xCAA90022 Could not discover endpoint for Integrate Windows Authentication. Check your ADFS settings. It should support Integrate Widows Authentication for WS-Trust 1.3.
Exception of type 'class Exception' at aggregatedtokenrequest.cpp, line: 362, method: AggregatedTokenRequest::LoadMex.

Log: 0xcaa10080 Load MEX document failed.
Logged at aggregatedtokenrequest.cpp, line: 379, method: AggregatedTokenRequest::LoadMex.

Request: authority: https://login.microsoftonline.com/common, client: d3590ed6-52b3-4102-aeff-aad2292ab01c, redirect URI: ms-appx-web://Microsoft.AAD.BrokerPlugin/d3590ed6-52b3-4102-aeff-aad2292ab01c, resource: https://officeapps.live.com, correlation ID (request): 8c5f79ad-b220-47d3-876d-c1eab360bc11

错误:0xCAA9002B WS-Trust元数据交换请求失败.
元数据交换文档(MEX):
< html>
< head>< title>
网络服务
</title></head>
< body>
< h1> Web服务</h1>
<表格width ='100 ^'border ='1'>
< tr>
< td>
端点
</td>
< td>
信息
</td>
</tr>
< tr>
< td>
<表格边框="0">< tr> td>服务名称:</td< td></td</tr> tr< td>端口名称:</td></td></tr></table>
</td>
< td>
<表格边框="0">< tr< td>地址:</td< td> https://login.microfocus.net:443/nidp/wstrust/sts/mex< /td</tr> tr< td> WSDL:</td< td>< a href =''https://login.microfocus.net:443/nidp/wstrust/sts/mex?wsdl> https://login.microfocus.net:443/nidp/wstrust/sts/mex?wsdl</a</td>/tr< tr>< td> ;执行 类:</td>< td> com.sun.xml.ws.mex.server.MEXEndpoint</td></tr></table>
</td>
</tr>
< tr>
< td>
<表格边框="0">< tr< td>服务名称:</td>< td> {http://www.netiq.com/nam-4-0/wstrust} SecurityTokenService</td></tr>< tr>< td>端口名称:</td>< td> {http://www.netiq.com/nam-4-0/wstrust} STS_Port< ;/td</tr></table>
</td>
< td>
<表格边框="0">< tr< td>地址:</td>< td> https://login.microfocus.net:443/nidp/wstrust/sts</td> ;</tr>< td> WSDL:</td>< td>< a href =''https://login.microfocus.net:443/nidp/wstrust/sts? wsdl》 https://login.microfocus.net:443/nidp/wstrust/sts?wsdl</td>/tr< tr> td实施 类:</td>< td> com.novell.nidp.wstrust.service.CustomSTS</td></tr></table>
</td>
</tr>
< tr>
< td>
<表格边框="0">< tr< td>服务名称:</td>< td> {http://www.netiq.com/nam-4-0/wstrust/saml} SecurityTokenService</td></tr>< tr>< td>端口名称:</td>< td> {http://www.netiq.com/nam-4-0/wstrust /saml} STS_Port_saml</td></tr></table>
</td>
< td>
<表格边框="0">< tr< td>地址:</td< td> https://login.microfocus.net:443/nidp/wstrust/sts/saml< /td</tr> tr< td> WSDL:</td< td>< a href =''https://login.microfocus.net:443/nidp/wstrust/sts/saml?wsdl> https://login.microfocus.net:443/nidp/wstrust/sts/saml?wsdl</a</td</tr> tr< td> ;执行 类:</td>< td> com.novell.nidp.wstrust.service.CustomSamlSTS</td></tr></table>
</td>
</tr>
< tr>
< td>
<表格边框="0">< tr< td>服务名称:</td>< td> {http://www.netiq.com/nam-4-0/wstrust/active12} SecurityTokenService</td></tr>< tr>< td>端口名称:</td>< td> {http://www.netiq.com/nam-4-0/wstrust /active12} STS_Port_active12</td></tr></table>
</td>
< td>
< table border ="0">< tr< td>地址:</td< td> https://login.microfocus.net:443/nidp/wstrust/sts/active12 /td</tr> tr< td> WSDL:</td< td>< a href =''https://login.microfocus.net:443/nidp/wstrust/sts/active12?wsdl> https://login.microfocus.net:443/nidp/wstrust/sts/active12?wsdl</a</td</tr> tr< td> ;执行 类:</td>< td> com.novell.nidp.wstrust.service.CustomActive12STS</td></tr></table>
</td>
</tr>
</table>
</body>
</html>

登录到aggregatedtokenrequest.cpp，行:379，方法:AggregatedTokenRequest :: LoadMex.

请求:权限:https://login.microsoftonline.com/common，客户端:d3590ed6-52b3-4102-aeff-aad2292ab01c，重定向URI:ms-appx-web://Microsoft.AAD.BrokerPlugin/d3590ed6-52b3-4102 -aeff-aad2292ab01c，资源:https://officeapps.live.com，相关ID(请求): 8c5f79ad-b220-47d3-876d-c1eab360bc11

Error: 0xCAA9002B WS-Trust metadata exchange request failed.
Metadata exchange document (MEX):
<html>
<head><title>
Web Services
</title></head>
<body>
<h1>Web Services</h1>
<table width='100^' border='1'>
<tr>
<td>
Endpoint
</td>
<td>
Information
</td>
</tr>
<tr>
<td>
<table border="0"><tr><td>Service Name:</td><td></td></tr><tr><td>Port Name:</td><td></td></tr></table>
</td>
<td>
<table border="0"><tr><td>Address:</td><td>https://login.microfocus.net:443/nidp/wstrust/sts/mex</td></tr><tr><td>WSDL:</td><td><a href="https://login.microfocus.net:443/nidp/wstrust/sts/mex?wsdl">https://login.microfocus.net:443/nidp/wstrust/sts/mex?wsdl</a></td></tr><tr><td>Implementation class:</td><td>com.sun.xml.ws.mex.server.MEXEndpoint</td></tr></table>
</td>
</tr>
<tr>
<td>
<table border="0"><tr><td>Service Name:</td><td>{http://www.netiq.com/nam-4-0/wstrust}SecurityTokenService</td></tr><tr><td>Port Name:</td><td>{http://www.netiq.com/nam-4-0/wstrust}STS_Port</td></tr></table>
</td>
<td>
<table border="0"><tr><td>Address:</td><td>https://login.microfocus.net:443/nidp/wstrust/sts</td></tr><tr><td>WSDL:</td><td><a href="https://login.microfocus.net:443/nidp/wstrust/sts?wsdl">https://login.microfocus.net:443/nidp/wstrust/sts?wsdl</a></td></tr><tr><td>Implementation class:</td><td>com.novell.nidp.wstrust.service.CustomSTS</td></tr></table>
</td>
</tr>
<tr>
<td>
<table border="0"><tr><td>Service Name:</td><td>{http://www.netiq.com/nam-4-0/wstrust/saml}SecurityTokenService</td></tr><tr><td>Port Name:</td><td>{http://www.netiq.com/nam-4-0/wstrust/saml}STS_Port_saml</td></tr></table>
</td>
<td>
<table border="0"><tr><td>Address:</td><td>https://login.microfocus.net:443/nidp/wstrust/sts/saml</td></tr><tr><td>WSDL:</td><td><a href="https://login.microfocus.net:443/nidp/wstrust/sts/saml?wsdl">https://login.microfocus.net:443/nidp/wstrust/sts/saml?wsdl</a></td></tr><tr><td>Implementation class:</td><td>com.novell.nidp.wstrust.service.CustomSamlSTS</td></tr></table>
</td>
</tr>
<tr>
<td>
<table border="0"><tr><td>Service Name:</td><td>{http://www.netiq.com/nam-4-0/wstrust/active12}SecurityTokenService</td></tr><tr><td>Port Name:</td><td>{http://www.netiq.com/nam-4-0/wstrust/active12}STS_Port_active12</td></tr></table>
</td>
<td>
<table border="0"><tr><td>Address:</td><td>https://login.microfocus.net:443/nidp/wstrust/sts/active12</td></tr><tr><td>WSDL:</td><td><a href="https://login.microfocus.net:443/nidp/wstrust/sts/active12?wsdl">https://login.microfocus.net:443/nidp/wstrust/sts/active12?wsdl</a></td></tr><tr><td>Implementation class:</td><td>com.novell.nidp.wstrust.service.CustomActive12STS</td></tr></table>
</td>
</tr>
</table>
</body>
</html>

Logged at aggregatedtokenrequest.cpp, line: 379, method: AggregatedTokenRequest::LoadMex.

Request: authority: https://login.microsoftonline.com/common, client: d3590ed6-52b3-4102-aeff-aad2292ab01c, redirect URI: ms-appx-web://Microsoft.AAD.BrokerPlugin/d3590ed6-52b3-4102-aeff-aad2292ab01c, resource: https://officeapps.live.com, correlation ID (request): 8c5f79ad-b220-47d3-876d-c1eab360bc11

错误:0xCAA90022无法发现集成Windows身份验证的终结点.检查您的ADFS设置.它应该支持WS-Trust 1.3的集成寡妇身份验证.
在aggregatedtokenrequest.cpp处，类异常"类型的异常，行:362，方法:AggregatedTokenRequest :: LoadMex.

日志:0xcaa1007d无法通过集成Windows身份验证获取令牌.
登录到aggregatedtokenrequest.cpp，行:157，方法:AggregatedTokenRequest :: UseWindowsIntegratedAuth.

请求:权限:https://login.microsoftonline.com/common，客户端:d3590ed6-52b3-4102-aeff-aad2292ab01c，重定向URI:ms-appx-web://Microsoft.AAD.BrokerPlugin/d3590ed6-52b3-4102 -aeff-aad2292ab01c，资源:https://officeapps.live.com，相关ID(请求): 8c5f79ad-b220-47d3-876d-c1eab360bc11

Error: 0xCAA90022 Could not discover endpoint for Integrate Windows Authentication. Check your ADFS settings. It should support Integrate Widows Authentication for WS-Trust 1.3.
Exception of type 'class Exception' at aggregatedtokenrequest.cpp, line: 362, method: AggregatedTokenRequest::LoadMex.

Log: 0xcaa1007d Failed to acquire token by integrated Windows authentication.
Logged at aggregatedtokenrequest.cpp, line: 157, method: AggregatedTokenRequest::UseWindowsIntegratedAuth.

Request: authority: https://login.microsoftonline.com/common, client: d3590ed6-52b3-4102-aeff-aad2292ab01c, redirect URI: ms-appx-web://Microsoft.AAD.BrokerPlugin/d3590ed6-52b3-4102-aeff-aad2292ab01c, resource: https://officeapps.live.com, correlation ID (request): 8c5f79ad-b220-47d3-876d-c1eab360bc11

需要帮助，谢谢！

推荐答案

您需要为WS-Trust 1.3的集成Windows身份验证启用ADFS端点默认情况下处于禁用状态，如下所示- 

You need to enable the ADFS endpoint for Integrated Windows Authentication for WS-Trust 1.3 that is disabled by default as shown below - 

您还可以在以下PowerShell cmdlet中使用r

You can also use run the following PowerShell cmdlet and restart the ADFS service on all servers in the farm.

Enable-AdfsEndpoint -TargetAddressPath "/adfs/services/trust/13/windowstransport"

这篇关于登录Outlook失败，出现ADD错误的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！