Note: In this case, you can see the Token-decrypting and Token-signing certificates are set to expire soon.Verify if any certificates are set to expire.Under AD FS expand Service and select Certificates.Verify which SSL certificate is about to expire Solution: This error can be caused if any of the three primary SSL Certificates that are required to federate to an external identity are nearing their experation date (Service Communications, Token-decrpting, and Token-signing). Failure to renew the certificate and update trust properties within XX days will result in a loss of access to all Office 365 services for all users. One of your on-premises Federation Service certificates is expiring. Symptom: After you replace your SSL certificates on your ADFS servers you continue to receive the following alert inside of the Office 365 portal.