UAG ADFS 2.0 Trunk Authentication fails: The URL you have requested is too long.

I'm in the exact same situation as http://social.technet.microsoft.com/Forums/forefront/en-US/a5b74a42-574d-4588-80ad-fd4ad82b0ee5/the-request-failed-because-url-is-too-long The workaround provided by Ben didn't work for me.

UAG Version: SP3 RU1

Here's a sample URL which is too long:

https://resourcests.customer.be/adfs/ls/?wa=wsignin1.0&wtrealm=https%3a%2f%2fpublic.customer.be%2fInternalSite%2fADFSv2Sites%2fpublic&wctx=rm%3d0%26id%3dpassive%26ru%3d%252fInternalSite%252fADFSv2Sites%252fpublic%252fdefault.aspx%253fresource_id%253d462F9EF83FDE490FA4AF0494D0E24447%2526login_type%253d2%2526site_name%253dpublic%2526secure%253d1%2526orig_url%253dhttps%253a%252f%252fresourcests.customer.be%252fadfs%252fls%252f%25253Fwa%253dwsignin1.0%252526wtrealm%253dhttps%2525253a%2525252f%2525252fpublic.customer.be%2525252fInternalSite%2525252fADFSv2Sites%2525252fpublic%252526wctx%253drm%2525253d0%25252526id%2525253dpassive%25252526ru%2525253d%252525252fInternalSite%252525252fADFSv2Sites%252525252fpublic%252525252fdefault.aspx%252525253fresource_id%252525253d462F9EF83FDE490FA4AF0494D0E24447%2525252526login_type%252525253d2%2525252526site_name%252525253dpublic%2525252526secure%252525253d1%2525252526orig_url%252525253dhttps%252525253a%252525252f%252525252fresourcests.customer.be%252525252fadfs%252525252fls%252525252f%25252525253Fwa%252525253dwsignin1.0%252525252526wtrealm%252525253dhttps%2525252525253a%2525252525252f%2525252525252fpublic.customer.be%2525252525252fInternalSite%2525252525252fADFSv2Sites%2525252525252fpublic%252525252526wctx%252525253drm%2525252525253d0%25252525252526id%2525252525253dpassive%25252525252526ru%2525252525253d%252525252525252fInternalSite%252525252525252fADFSv2Sites%252525252525252fpublic%252525252525252fdefault.aspx%252525252525253fresource_id%252525252525253d5BBA0D4796604D3FA734C1B12576F8FE%2525252525252526login_type%252525252525253d2%2525252525252526site_name%252525252525253dpublic%2525252525252526secure%252525252525253d1%2525252525252526orig_url%252525252525253dhttp%252525252525253a%252525252525252f%252525252525252fappportal.customer.be%252525252525252f%2525252525252526URLHASH%252525252525253d586baade-3cc0-4eb1-9876-652d5a92563e%252525252526wct%252525253d2013-08-28T06%2525252525253a48%2525252525253a52Z%252525252526wreply%252525253dhttps%2525252525253a%2525252525252f%2525252525252fpublic.customer.be%2525252525252fInternalSite%2

ADFS: resourcests.customer.be
 Trunk: public.customer.be

Published app (non-claims): appportal.customer.be (just static site with no authN on it)

Any thoughts?

http://setspn.blogspot.com