- Service communications for encrypting the message
- Token-decrypting for "encrypting" the token
- Token-signing for signing the token
When you configure the certificate for SSL, you need to give it the full name of the site e.g. "contuso.co.uk". Don't just give it the name "contuso". If you do, ADFS will reject it when you install ADFS and will ask for a certificate that has "dots" in it.
Actually, the real error is "ADFS requires full name for certificate".