Sometimes you need to get the IssuerID from CA AFTER it was configured and the admin’s lose the ID.
1) Run Get-SPTrustedSecurityTokenIssuer
2) Make sure you are looking at the correct name (red arrow)
3) The IssuerID is the first part of the name (before the @ symbol)
