Trying to setup ADFS with AD Connect. I get an error message when trying to add the ADFS service account. The error states that there is already an existing service account in the directory with the ADFS service Service Principal Name (SPN).

I ran setspn -xfound 0 groups of duplicate SPNs.

What else can cause this error message?

Running Server 2012R2


You could check the existing ADFS service SPN by setspn -q host/<adfs farm name>, For example setspn -q host/fs.contoso.com

  • Is my reply helpful? – Nancy Xiong Jul 4 '18 at 4:11

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.