This error can occur when the forceNTLM setting in the wsTrust element of the client application is configured incorrectly. If the client application uses a proxy or WAP server, forceNTLM should be set to true. Some client applications also require this setting to be true. See Configuration for details on configuring the various OnBase clients to use AD FS.