AD FS Service Account Permissions and Rights, Initial Configuration Notes

The initial configuration of AD FS (at least for v3.0) has to be performed with a domain administrator account.

 The service account that runs AD FS must have rights on the local server to:

Log in as a batch job
Generate Audit Logs