The client presented an invalid inbound token as evidence. The token referenced an X509 certificate that is not trusted by ...

The client presented an invalid inbound token as evidence. The token referenced an X509 certificate that is not trusted by the AD FS trust policy. The key identifier field contains the certificate thumbprint. Verify that the certificate is included in the list of verification certificates in the Federation Service's trust policy for that account partner.