If you get an error like this, you have to update federation metedata url and iisreset then restart adfs service. Normally CRM throws a generic error and I found this message from trace.
The issuer of the security token was not recognized by the IssuerNameRegistry. To accept security tokens from this issuer, configure the IssuerNameRegistry to return a valid name for this issuer
- Open Deployment Manager on CRM Server
- Configure Claims Based Authentication from wizard
- Click start menu, select run and type iisreset to complete.
- Then go to Services on ADFS Server and restart ADFS Service.
Reference : https://support.microsoft.com/en-us/kb/2686840
http://www.dynamicscrmpros.com/microsoft-dynamics-crm-error-the-issuer-of-the-security-token-was-not-recognized-by-the-issuernameregistry-solved/