This error can occur when the token returned from AD FS is either empty or cannot be read. In most cases this is because the soapExtensionTypes element in the webServices element of the client configuration file is still commented out. To function correctly, this section must be uncommented. See Configuration for details on configuring the various OnBase clients to use AD FS.