How can you enable auditing for AD FS?

1. Click Start, point to Programs, point to Administrative Tools, and then click Local Security Policy.
2. Navigate to the Security Settings\Local Policies\User Rights Management folder, and then double-click Generate security audits.
3. On the Local Security Setting tab, verify that the AD FS service account is listed. If it is not present, click Add User or Group and add it to the list, and then click OK.
4. Close Local Security Policy.
5. Open a PowerShell prompt with administrative elevated privileges and run the following command to enable auditing.

Set-ADFSProperties -LogLevel Verbose,Errors,Warnings,Informationauditpol.exe /set /subcategory:"Application Generated" /failure:enable /success:enable