I don't think I can help you with this. It looks like ADFS doesn't think the digital signature coming from the Sun OpenSSO signed token is valid for some reason. I think you might need to investigate with Sun and MS directly.