'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Fix AADSTS20012 Exchange Account Setup Error on Apple Mail
Question details
The user needs to resolve an authentication error preventing the setup of an Exchange email account on Apple Mail.
- Product
- Apple Mail (GoDaddy Hosted Exchange)
- Device & OS
- not provided
- Scenario
- Setting up or logging into an Exchange account on Apple Mail.
- Observed behavior
- The authentication process fails and displays an AADSTS20012 error, indicating an invalid or malformed WS-Federation message.
Before attempting to re-add your account, keep the error prompt open or take a screenshot so you can copy the specific request ID and correlation ID.
Check GoDaddy Service Status and Contact Support
Since this error is usually caused by a provider-side WS-Federation outage, verify the service status and report the specific error IDs to support.
The AADSTS20012 error means the server returned an invalid federation message during the login attempt. This is almost always an issue on the email provider's side (such as GoDaddy) rather than a misconfiguration on your device.
Visit the official GoDaddy service status page in your web browser to check for any active incidents regarding Office 365, Exchange, or email authentication.
From the error prompt in Apple Mail, note down the request ID, correlation ID, timestamp, and your exact account domain.
Reach out to GoDaddy Support and provide the collected IDs and timestamp. This allows their technical team to trace the failed authentication request on their backend servers.
Remove and Recreate the Exchange Account
Once the provider has resolved the federation outage, you will need to re-add your account to establish a fresh authentication token.
Enhance Your Productivity with WPS Office
While waiting for your Exchange email provider to resolve server outages, ensure your offline work remains uninterrupted. WPS Office is a powerful, lightweight, and free office suite that offers a familiar interface and seamless compatibility with Microsoft Office files.
- 1. Download the Installer: Visit the official WPS website and click the free download button for your operating system.
- 2. Install the Software: Open the downloaded installation file and follow the quick on-screen instructions to set up the suite.
- 3. Start Creating: Launch WPS Office to instantly open, edit, or create documents, spreadsheets, and presentations.
Frequently Asked Questions
What does the AADSTS20012 error mean?
The AADSTS20012 error indicates that an invalid or malformed WS-Federation message was encountered during Exchange account authentication. This typically means the authentication servers hosted by the email provider (like GoDaddy) are experiencing a temporary outage or configuration failure.
Can I fix the AADSTS20012 error by changing my Apple Mail settings?
Generally, no. Because the error stems from a provider-side server issue returning bad authentication tokens, changing local settings on your device will not fix it. You must wait for the provider to resolve the incident.
Why does GoDaddy Support need my correlation ID?
The correlation ID and request ID are unique identifiers generated during your specific login attempt. Support teams use these IDs to search their server logs, allowing them to pinpoint exactly where and why the authentication request failed.
