The Federation Service encountered an error while generating a token for a Windows NT token-based application. The token ...

The Federation Service encountered an error while generating a token for a Windows NT token-based application. The token from the account partner contained no group claims that can be mapped to Active Directory Domain Services groups. 

This token request will fail. 

User Action 
Ensure that configuration settings are consistent between this Federation Service and the account partner. The Federation Service is configured never to use shadow accounts for this account partner, which means that tokens from the account partner must always contain a group claim that can be mapped to an Active Directory Domain Services group. Ensure the following: (1) the local account setting for this account partner is correct, (2) organization groups have properly configured mappings to Active Directory Domain Services groups, (3) the account partner is including correct group claims for this user.