Share via

ADFS Diagnostic Tool

  • Article

A huge thanks to the ADFS test team for developing such a great tool. 

 

Here is a quick "how to"

 

The tool is very simple to use and provides a graphical UI. In order to perform distributed diagnosis, i.e. diagnose failures based on the configuration of multiple machines in the scenario, it’s necessary to copy the out file generated by the tool each time it’s run and use it as an input/output file when running the tool on the next machine.

 

For example, to debug a scenario with an FS at the account role (FS-A), an FS at the resource role (FS-R) and a Web Server (WS), first run the tool on the FS-A selecting a new file, say adfsdiag.out. After the tool is run, this file will now contain configuration information relative to the FS-A. Copy the file to the FS-R machine and run the tool there, this time selecting the existing adfsdiag.out file. The tool will detect it already contains information relative to other roles and will execute extra configuration checks, for example, a claim flow check that verifies the outgoing claims sent by the FS-A match the incoming claims expected by the FS-R. After this second run, adfsdiag.out will contain information relative to both the FS-A and FS-R. Finally, copy the out file to the WS machine and run the tool again following the same steps. When running the tool for a role for which there’s already information present in the selected file, the old data for that role will be overwritten with the new information, making it possible to fix errors on a machine and re-run the tool without having to start the whole process all over again. There’s no “right order” to run the tool, all of them should give the same output, except for some certificate checks that will only be executed at the WS in case the information from the FS-R is available beforehand

 

Please give this tool a try and provide any feedback to this blog.

ADFSDiag.zip

Comments

  • Anonymous
    January 01, 2003
    Sorry - Seems to be working.  I saw the 2 version and they are labeled x86 and amd64 versions.  I usually see x64 or ia64 for intel 64bit architechture and thought amd64 was for AMD procs, I installed the wrong version(x86).  The amd64 version is running fine now.

  • Anonymous
    January 01, 2003
    PingBack from http://identity-des.com/2008/01/30/new-diagnostic-tool-for-active-directory-federation-services/

  • Anonymous
    January 01, 2003
    Hi Peter, I have put the 64bit version up on the site - this should resolve your issue http://blogs.technet.com/adfs/archive/2008/02/18/adfs-diagnostic-tool-64-bit.aspx

  • Anonymous
    January 01, 2003
    A new version of the tool is now available... This version includes SharePoint / MOSS support: the UI

  • Anonymous
    January 01, 2003
    The updated tool can be found here . The attachment contains both 32 and 64 bit installers. A cool new

  • Anonymous
    January 01, 2003
    I can't tell you how much this tool saved me, I was troubleshooting for hours and I would have never figured out the issues without this tool.  Thanks so much for writing and publishing it!

  • Anonymous
    January 01, 2003
    The comment has been removed

  • Anonymous
    January 01, 2003
    Bizarrely I have three W2K8R2 servers, all Build 7600; it works on one (The Resource Fed Server), but not on the Account Fed Server or the server where the ADFS Web Agent is installed against IIS. Error is "Unable to create a report for role (Account Federation Server|WebAgentClaims). The ADFS Diagnostics did not create a log file" No trace of any helpful messages anywhere, and I have checked the obvious potential issues (file permissions etc) Anyone got any ideas?

  • Anonymous
    January 01, 2003
    It's no secret, troubleshooting ADFS can be tough. That's why a few key members from our ADFS Test Team

  • Anonymous
    January 01, 2003
    The link to the ADFS 64 bit troubleshooting tool is no longer valid. Is there a new location to this tool?

  • Anonymous
    January 01, 2003
    Does anyone have a version that is confirmed to work on windows 2008 64bit? I have tried every URL here, but everything now points to a new "updated" version that is suppose to work with 32 and 64bit, but mine crashes on 3 different 64bit servers.  The old 64bit version that was on this site, is no longer there. http://blogs.technet.com/adfs/archive/2008/02/18/adfs-diagnostic-tool-64-bit.aspx

  • Anonymous
    January 01, 2003
    Is ADFS Diag supported for Windows 2008 Enterprise edition 64-bit?

  • Anonymous
    January 01, 2003
    Hi Peter, ADFSDiag should work on 2008 64bit... What error are you getting?

  • Anonymous
    May 09, 2011
    Does this diagnostic tool help troubleshoot adfs 2.0 as well?

  • Anonymous
    September 27, 2011
    If anyone find any kind of computer related issues than feel free to contact our expert at 1-800-793-7521. http://www.supportmart.net

  • Anonymous
    November 25, 2011
    The comment has been removed

  • Anonymous
    March 01, 2013
    Does this work for ADFS 2.0 as well? If not, where can I get a tool like this for the newer version? Thank you

  • Anonymous
    December 02, 2014
    Thanks for sharing this great post. This is really very informative about all tech support sites.

    http://www.askpcexperts.com/

  • Anonymous
    October 05, 2015
    Thank you for sharing this nice article. If anyone have any computer related issues then you can contact us vis our toll free number.
    https://www.wefix365.us/

  • Anonymous
    February 25, 2016
    I am still trying to find out how to user this tool.