使用asp.net和acs进行被动联合身份验证的天蓝色网络角色

时间:2014-07-05 07:00:29

标签: asp.net asp.net-mvc-4 c#-4.0 azure acs

我想使用窗口标识基金会框架在azure环境中部署我的azure web角色应用程序,但我有这样的错误:

找不到带有指纹9f217128ecd4f952479274eb09f1f3fd2199538a的证书。

这是我配置文件的一部分

 <federatedAuthentication>
      <cookieHandler requireSsl="false" />
      <wsFederation  passiveRedirectEnabled="true" issuer="https://webroboteu.accesscontrol.windows.net/v2/wsfederation" realm="http://webrobot/"  requireHttps="false" />
  </federatedAuthentication>
      <serviceCertificate>
         <certificateReference  x509FindType="FindByThumbprint" findValue="my thumbprint" />
      </serviceCertificate>
  <certificateValidation certificateValidationMode="None"   />

    <add type="Microsoft.Samples.DPE.OAuth.Tokens.MachineKeySessionSecurityTokenHandler,  
        Microsoft.Samples.DPE.OAuth" />
    <remove type="Microsoft.IdentityModel.Tokens.SessionSecurityTokenHandler, 
        Microsoft.IdentityModel, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35"></remove>

                <add type="Microsoft.Samples.DPE.OAuth.Tokens.SimpleWebTokenHandler, Microsoft.Samples.DPE.OAuth" />
  </securityTokenHandlers>
  <issuerTokenResolver type="Microsoft.Samples.DPE.OAuth.ProtectedResource.ConfigurationBasedIssuerTokenResolver, Microsoft.Samples.DPE.OAuth">
    <serviceKeys>
      <add serviceName="http://webrobot/" serviceKey="my simmetric key" />
    </serviceKeys>
  </issuerTokenResolver>

当我删除federatedAuthentication标记时,问题不存在,但在被动模式下是必要的

0 个答案:

没有答案