Quantcast
Channel: Azure Active Directory forum
Viewing all articles
Browse latest Browse all 16000

How to configure ConfigurationBasedIssuerNameRegistry for WaaD tenant

$
0
0

I'm trying to configure an asp.net MVC application to use WaaD manually and, for simplicity - I thought - I'd rather start withConfigurationBasedIssuerNameRegistry and not the database registry but I'm struggling to figure out what needs to be configured and, following a successful authentication and redirection, I keep getting the error -

ID4175: The issuer of the security token was not recognized by the IssuerNameRegistry. To accept security tokens from this issuer, configure the IssuerNameRegistry to return a valid name for this issuer.

[SecurityTokenException: ID4175: The issuer of the security token was not recognized by the IssuerNameRegistry. To accept security tokens from this issuer, configure the IssuerNameRegistry to return a valid name for this issuer.]
   System.IdentityModel.Tokens.Saml2SecurityTokenHandler.ValidateToken(SecurityToken token) +985392
   System.IdentityModel.Tokens.SecurityTokenHandlerCollection.ValidateToken(SecurityToken token) +135
   System.IdentityModel.Services.TokenReceiver.AuthenticateToken(SecurityToken token, Boolean ensureBearerToken, String endpointUri) +502
   System.IdentityModel.Services.WSFederationAuthenticationModule.SignInWithResponseMessage(HttpRequestBase request) +1508
   System.IdentityModel.Services.WSFederationAuthenticationModule.OnAuthenticateRequest(Object sender, EventArgs args) +700
   System.Web.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +80
   System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +165

So far I have extracted the certificate from the federation metadata and installed it on my local machine. I have then used its thumbprint within my trustedIssuers configuration element, I've tried several things for the name, with no success

What am I missing? How do I figure out the correct configuration required?

Thanks in advance

Yossi


Yossi Dahan - http://yossidahan.wordpress.com - [To help others please mark replies as answers if you found them helpful]


Viewing all articles
Browse latest Browse all 16000

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>