| Security | 1200 | Info | Successful user logon via AD FS |
| Security | 1201 | High | Failed user logon via AD FS |
| AD FS/Admin | 342 | Info | Token issued successfully |
| AD FS/Admin | 364 | High | Encountered error during federation passive request |
| AD FS/Admin | 389 | High | Token validation failed |
| AD FS/Admin | 1000 | Info | AD FS service started |
| AD FS/Admin | 1001 | Warning | AD FS service stopped |
| Security | 307 | Medium | Certificate authentication attempt |
| Security | 411 | Critical | Unauthorized token request detected |
| Security | 500 | High | Claims issuance policy modified |
| Security | 501 | High | Relying party trust added or removed |
| Security | 512 | Critical | Federation service certificate changed |
| Security | 516 | High | Token-signing certificate nearing expiry |
| AD FS/Admin | 364 | High | Token issuance failure |
| AD FS/Admin | 342 | High | Federation trust not reachable |
| AD FS/Admin | 100 | Info | Federation service started |
| AD FS/Admin | 102 | High | Federation service stopped |
| AD FS/Admin | 501 | Medium | Relying party trust added/removed |
| Security | 1200 | Info | Successful token issuance |
| AD FS/Admin | 100 | Info | AD FS configuration database connection established |
| AD FS/Admin | 106 | Info | Federation server proxy connected to Federation Service |
| AD FS/Admin | 120 | High | AD FS proxy trust authentication failure |
| AD FS/Admin | 205 | Medium | Unable to retrieve Federation metadata |
| AD FS/Admin | 307 | Medium | Token issuance error |
| AD FS/Admin | 350 | Critical | Configuration database corruption or access failure |
| AD FS/Admin | 376 | Warning | Revocation check failed |
| AD FS/Admin | 500 | Critical | Service communications certificate expired |
| System | 7023 / 7031 | High | AD FS service terminated unexpectedly |
| Security | 500 | High | Claims issuance policy modified |
| Security | 501 | High | Relying party trust changed |
| Security | 502 | High | Authentication policy modified |
| Security | 503 | Medium | Attribute store configuration changed |
| Security | 504 | Medium | Web application proxy trust updated |
| AD FS/Admin | 342 | High | Federation trust not reachable |
| AD FS/Admin | 364 | Critical | Token issuance failure |
| AD FS/Admin | 100 | High | Configuration database connection failure |
| AD FS/Admin | 182 | High | Proxy trust communication failure |
| AD FS/Admin | 394 | High | Authentication request processing failed |