ADFS error while using new SharePoint Migration Tool on ADFS 2012 R2

Today I ran into an error when I tried to use Microsoft’s new SharePoint Migration Tool for Office 365. We use ADFS which is running on Windows Server 2012 R2. When I tried signing in, I received the unspecific ““An error occurred. Contact your administrator for more information.” and I couldn’t provide my credentials.

I dug into the logs on my ADFS host machine (not the WAP) and found a slightly more helpful message:

Encountered error during federation passive request.

Additional Data

Protocol Name:
wsfed

Relying Party:
urn:federation:MicrosoftOnline

Exception details:
Microsoft.IdentityServer.Service.Policy.PolicyServer.Engine.InvalidAuthenticationTypePolicyException: MSIS7102: Requested Authentication Method is not supported on the STS.

From this, I found a blog discussing a similar problem authenticating Microsoft CRM 2013. To resolve the issue, I followed the same steps, turning on Forms authentication for the Office 365 relying trust.

I opened the AD FS console, navigated to Authentication Policies, then right-clicked on the menu tree and edited “Global Primary Authentication”.

That solved the problem and I was able to login to the SharePoint Migration tool.

First Impressions

At release 1 (as of January 30, 2018) the SharePoint Migration Tool still seems pretty buggy. Scanning a file share to upload to SharePoint Online, the tool ate up all of my disk space and crashed within 10 minutes. Not a promising start!