This error can occur when AD FS uses Active Directory Distribution Groups instead of Active Directory Security Groups. In order to successfully authenticate with OnBase, users in AD FS must be assigned to Active Directory Security Groups. More information on AD FS groups can be found in the AD FS documentation provided by Microsoft.