I just made my frist attempt at setting up Geneva server and create a test web application to authenticate but I am getting the error below after I put in my credentials and click 'Sign In'. I've gone through several samples in the Identity toolkit and those all worked fine but that was against either Live ID or the development STS.

The error mentions cookies and I've verified the internet security settings do allow cookies. Any Ideas?



Microsoft.IdentityServer.Shared.WSFederation.InvalidContextException: MSIS7001: The passive protocol context was not found or not valid. If the context was stored in cookies, the cookies that were presented by the client were not valid. Ensure that the client browser is configured to accept cookies from this website and retry this request.

at Microsoft.IdentityServer.Shared.WSFederation.EncodedContext..ctor(String encodedValue) at Microsoft.IdentityServer.Shared.WSFederation.WSFederationPassiveAuthentication.ParseRelyingPartyInfoFromWCtx(String wctx) at Microsoft.IdentityServer.Shared.WSFederation.WSFederationPassiveAuthentication.BuildSignInResponseForProtocolResponse(WSFederationPassiveContext federationPassiveContext, Boolean isIssuedToken) at Microsoft.IdentityServer.Shared.WSFederation.WSFederationPassiveAuthentication.BuildSignInResponse(WSFederationPassiveContext federationPassiveContext, SecurityToken securityToken, Boolean isIssuedToken) at Microsoft.IdentityServer.Shared.WSFederation.WSFederationPassiveAuthentication.SignIn(HttpContext context, WSFederationPassiveContext federationPassiveContext, SecurityToken securityToken, Boolean isIssuedToken) at FaultHandlingWSFederationPassiveAuthentication.SignIn(SecurityToken token, Boolean isIssuedToken)

---

Josh Bernard

When you configured your application what is the Ws-Federation Passive endpoint you set in Geneva Server configuration wizard? Is this the endpoint of your application?

Can you check Geneva Server Ws-Federation Passive endpoint. Open Geneva Server Administration
-> Relying Parties Node

-> Click relying party properties

-> Endpoints Tab

-> Select Ws-Federation Passive endpoint

Please make sure that Ws-Federation Passive endpoint is the URL of you application and not Geneva Server endpoint itself (like https://login.domain/FederationPassive).