The client credentials are valid, but one or more claims could not be produced. The syntax of a Lightweight Directory Access Protocol (LDAP) attribute is different from the standard syntaxes that are defined in RFC 2252. The error string field contains the LDAP attribute name.