Server certificates for the ADFS servers are issued by an internal CA or are self signed. When attempting an autodiscover test from BEMS using modern authentication to O365, the test fails with an "unable to find valid certification path to requested target" error.

More...