Disabling Revocation checks for Signing certificate and Encryption certificates

Last Updated : May 25, 2017 |
Prolog information
Active Directory Federation Services fails an authentication request if it is unable to perform Authorization Service (SP) certificate revocation checks. Use the following procedure to disable Revocation checks.
  1. Open Windows PowerShell on the Active Directory setup.
  2. Run the following command with Relying Party Trust Identifier:
    ADDITIONAL INFORMATION: Get-AdfsRelyingPartyTrust -Identifier <Identifier> | Set-AdfsRelyingPartyTrust
    -SigningCertificateRevocationCheck None -EncryptionCertificateRevocationCheck None