private static AuthenticationConfiguration CreateAuthenticationConfiguration() { var options = new AuthenticationOptions() { RequestType = HttpRequestType.AuthorizationHeader, Scheme = "SAML" }; var registry = new ConfigurationBasedIssuerNameRegistry(); registry.AddTrustedIssuer("18145fb6b5d96b3cc34ec7599f12172bb93c68ef", "DummySTS"); var adfsConfig = new SecurityTokenHandlerConfiguration(); adfsConfig.AudienceRestriction.AllowedAudienceUris.Add(new Uri("urn:claimsdemo:http45mvc")); adfsConfig.IssuerNameRegistry = registry; adfsConfig.CertificateValidator = X509CertificateValidator.None; X509Store store = new X509Store(StoreName.My, StoreLocation.LocalMachine); store.Open(OpenFlags.ReadOnly); X509Certificate2Collection certificates = store.Certificates; X509Certificate2Collection matchingCertificates = certificates.Find( X509FindType.FindByThumbprint, "a2028f8e7f7b082cd35e81fd0ca0b70b04651abf", false); X509Certificate2 certificate = certificates[0]; List<SecurityToken> serviceTokens = new List<SecurityToken>(); serviceTokens.Add(new X509SecurityToken(certificate)); SecurityTokenResolver serviceResolver = SecurityTokenResolver.CreateDefaultSecurityTokenResolver( serviceTokens.AsReadOnly(), false); adfsConfig.ServiceTokenResolver = serviceResolver; var config = new AuthenticationConfiguration { RequireSsl = false }; config.AddSaml11(adfsConfig, options); return config; }