用戶端提供無效的登入加速器權杖做為證據。此權杖包含一個 Kerberos AP 要求，但該要求來自不信任其發行 AD FS 權杖的主體。金鑰識別元欄位包含主體名稱。

The client presented an invalid logon accelerator token as evidence. The token included a Kerberos AP-Request that was originated by a principal that is not trusted to issue AD FS tokens. The key identifier field contains the principal name.