Access Manager ships with SAML 2.0 enabled by default. To use the WS Federation protocol, it must be enabled on Identity Server.
On the Home page, click Identity Servers > [cluster name] > Configuration.
In the Enabled Protocols section, select WS Federation.
Click Save.
Update Identity Server.