WS-Trust and WS Federation protocols are enabled in Access Manager.
Perform the following steps:
In Administration Console, click Devices > Identity Servers > Edit.
In the Enabled Protocols section, ensure that WS-Trust and WS Federation are selected.
An Office 365 administrative account is available. This administrative user must not belong to the Office 365 domain that your organization will manage.
Microsoft does not support sub-domains having different federated settings than their parent. To use a sub-domain for Office 365, ensure that either you do not use Office 365 with the parent domain, or both the parent domain and its sub-domain have the identical federation settings.
An Office 365 domain for your organization is available. See Section 8.2, Configuring an Office 365 Domain to Federate with Access Manager.