ACS50000: There was an error issuing a token.

This particularly annoying issue occurs if you are a co-administrator for a Windows Azure Portal and try to access the ACS Management Portal.  This is a typical setup for a company where the company owner creates the Windows Azure Account but probably doesn’t manage the technical details of the implementation, like adding identity providers to a service namespace.

I ran across this issue and customer service couldn’t seem to track down the issue.  Through trial and error I figured out it was because I was a co-administrator.  Then I ran across it as a known issue after much googling.

The error message when trying to access the ACS Management Portal will be as follows:

• ACS50000: There was an error issuing a token.

The work-around the issue, do the following:

1. Log into the ACS Management Portal using the user account of the primary service administrator.

2. Under Administration, click Portal Administrators.

3. Click Add to add a new portal administrator for the ACS namespace.

4. For Identity Provider, select Windows Live ID.

5. For Identity claim type, select http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress.

6. For Identity claim value, enter the Windows Live ID of the administrator you would like to add.

7. Click Save.

This should fix the problem and you can now manage the ACS namespace using the Windows Live ID of the co-administrator.