Our Work Folders deployment has just stopped working.
Once the user has logged in to ADFS they get the following error message "The sync server needs the user's current user name and password (0x80c80300)"
At the same time we see the following error in the file servers SyncShare event log:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System><Provider Name="Microsoft-Windows-SyncShare" Guid="{9E6153AD-A829-4B70-B997-8E463A7A111C}" /><EventID>1013</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime="2014-12-03T14:48:32.922225100Z" /><EventRecordID>1178</EventRecordID><Correlation /><Execution ProcessID="1988" ThreadID="2800" /><Channel>Microsoft-Windows-SyncShare/Operational</Channel><Computer>fileserver.domain.com</Computer><Security UserID="S-1-5-18" /></System>
- <EventData><Data Name="User">eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImVoZWxJMUFwWm9HT2VZdXU5NGZZb21tamUzayJ9.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.eCefzniju5qjqxIDdC2KCefkiNBNoGV-B1zg8EsnygUyV0LilPpANpv5uH75JJ9ekv9BN0vz7m6QezHEN4dYc5Z-6UJCzm7Wz6s1yNqVz-Sq5_wf_RrrHkxntcLXT2LHyyLN6ZxJy8uOF4vLw_fLsDzrNHkpaKUoevLAvNLI503IAiKDijKmQ0Qa2hZGsDT57yhKLGtjMXdqwx6FpFpP6vxA9qoUlR1E-tlt0ezTSD8j36djV9VbFpTlfeiH26D0n92T4exQCJkPdVzR42G7KbYyo9Acu0GGf7dnameWMQV9lT-Jtb7hH9xNReuVSVzqgtstsSDJR0mCsKJfLrdKVw</Data><Data Name="Error">0X80C80021 - ECS_E_SYNC_ADFS_UNAUTHORIZED</Data></EventData></Event>I have attempted re creating the setup using several blog posts including: http://blogs.technet.com/b/filecab/archive/2014/03/03/deploying-work-folders-with-ad-fs-and-web-application-proxy-wap.aspx. Including deleting all WAP rules, deleting and recreating the Relaying Party Trust and obtaining new certificates for the file server.
ADFS and WAP are working correctly for our Office 365 federations and on-premise SharePoint, Exchange and other web applications
If I turn ADFS authentication off on the Work Folders server I can successfully connect and setup work folders on a domain joined computer, however as soon as ADFS authentication is enabled I get the above error.