When trying to open a word document, I'm getting following error-
![]()
This started happening when I unextended my web application. Looking at ULS logs, I see-
SPSecurityTokenServiceManager!EnsureSharePointLogonRequestClaims: InputIdentity doesn't contain PrimarySid claim.
Could not get SPIisSettings for url 'http://server/_vti_bin/wopi.ashx/files/e8d136a67825499093403961cfcbac25?access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6InFRWmZxeFdNRUFFeEVRWW5ZeFcyUHFxc1h2YyJ9.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.mmm35SzkF5fd_y05FeKd6ppumvTV4iUjwoyIv9UNjk0bILzsqf4a8Cly9B8HKYxPj-jY4d2yIei8BDAh4wh9BBXnk6AqTG8bzmLg4IdYWOZ81OaIC7JwqP0f2nC3X3hYOCpKXrJpCzT4u5gg4sJkvWzoDYhiDd_fQpbTpM2FkwZytAew3LbcfTlm8O1MSAc7mX35VXVDcyel8oc3cJf35OGhm1Nksfgv36Huz70ufwJu8R2YUaYtydjbWjaclM-b35WTswGpTGxlPhRQgcflQCnic-LeYH3r-Ul3yV7deVBYAm-b1RtfrBQvbHjYKfEIO0BBIq9Rga27r0xRnY5Ucw&access_token_ttl=1569300794963'.
STS Call Claims Saml: Problem getting output claims identity. Exception: 'System.InvalidOperationException: Could not retrieve the IIS Settings.
at Microsoft.SharePoint.IdentityModel.SPIdentityClaimResolver.EnsureOriginalUserLogonClaims(Uri contextUri, SPClaim sharePointIdentityClaim, Claim logonIdentity, IClaimsIdentity outputIdentity)
at Microsoft.SharePoint.IdentityModel.SPSecurityTokenService.EnsureSharePointClaims(SPRequestInfo requestInfo, IClaimsIdentity outputIdentity, SPCallingIdentityType callerType)
at Microsoft.SharePoint.IdentityModel.SPSecurityTokenService.AugmentOutputIdentityForRequest(SPRequestInfo requestInfo, IClaimsIdentity outputIdentity)
at Microsoft.SharePoint.IdentityModel.SPSecurityTokenService.GetOutputClaimsIdentity(IClaimsPrincipal principal, RequestSecurityToken request, Scope scope)'.
SPSecurityContext: Request for security token failed with exception: System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]: Could not retrieve the IIS Settings. (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is: System.InvalidOperationException: Could not retrieve the IIS Settings.
at Microsoft.SharePoint.IdentityModel.SPIdentityClaimResolver.EnsureOriginalUserLogonClaims(Uri contextUri, SPClaim sharePointIdentityClaim, Claim logonIdentity, IClaimsIdentity outputIdentity)
at Microsoft.SharePoint.IdentityModel.SPSecurityTokenService.EnsureSharePointClaims(SPRequestInfo requestInfo, IClaimsIdentity outputIdentity, SPCallingIdentityType callerType)
at Microsoft.SharePoint.IdentityModel.SPSecurityTokenService.AugmentOutputIdentityForRequest(SPRequestInfo requestInfo, IClaimsIdentity outputIdentity)
at Microsoft.SharePoint.IdentityModel.SPSecurityTokenService.GetOutputClaimsIdentity(IClaimsPrincipal principal, RequestSecurityToken request, Scope scope)
at Microsoft.IdentityModel.SecurityTokenService.SecurityTokenService.Issue(IClaimsPrincipal principal, RequestSecurityToken request)
at Microsoft.SharePoint....).
An exception occurred when trying to issue security token: Could not retrieve the IIS Settings..
I tried to extend the web application again, perform IISRESET but that did not resolved the problem.
Any thoughts on how this could be resolved?