The Federation Service Proxy encountered an exception when it called a Federation Service Web method. Federation Server URL: ...

The Federation Service Proxy encountered an exception when it called a Federation Service Web method. 
Federation Server URL: %1 
Web method: %2 
Proxy certificate thumbprint: %3 

This may cause a user request to fail. 

User Action 
The exception details may give an indication of the precise problem. 

Check network connectivity between the Federation Service Proxy and the Federation Service. 

Ensure that the Federation Service is running. 

Ensure that the Federation Service Proxy client authentication certificate has been added to the list of proxy authentication certificates in the Federation Service trust policy. 

Ensure that the Federation Service Proxy client authentication certificate chains to a root that is trusted by the Federation Service. 

Ensure that the Federation Service Proxy service account, which is set to Network Service by default, can access the private key of the certificate that was identified by the thumbprint '%3'.  
Conditions that can prevent the Federation Service Proxy service account from having access to the certificate private key include the following:
(1) The certificate was installed from a file that did not include the private key, such as a .cer or .p7b file. 
(2) The certificate's private key was imported (for example, from a .pfx file) into a user's certificate store instead of the Local Computer Personal certificate store. 
(3) The certificate was generated as part of a certificate request that did not specify the "Machine Key" option. 
(4) The Federation Service Proxy service account has not been granted Read access to the certificate's private key.

Ensure that the Federation Service Internet Information Services (IIS) Secure Sockets Layer (SSL) server certificate chains to a root that is trusted by the Federation Service Proxy. 

Ensure that the Federation Service Uniform Resource Locator (URL) that is configured in the Federation Service Proxy web.config uses the name that is the subject of the Federation Service IIS SSL server certificate. 

Additional Data 
Exception information: 
%4