I've configured claims-based authentication using Windows Live ID.
In Microsoft service manager the default return URL is as in WS-Federation specification:
I have a page with a link that redirects to
login.live.com. I have specified a return URL in MSM as
And recieve the following error:
Message : System.IdentityModel.Tokens.SecurityTokenException: The issuer of the token is not a trusted issuer. at Microsoft.SharePoint.IdentityModel.SPLocalIssuerNameRegistry.GetIssuerName(SecurityToken securityToken) at Microsoft.SharePoint.IdentityModel.SPPassiveIssuerNameRegistry.GetIssuerName(SecurityToken securityToken) at Microsoft.IdentityModel.Tokens.Saml11.Saml11SecurityTokenHandler.CreateClaims(SamlSecurityToken samlSecurityToken) at Microsoft.IdentityModel.Tokens.Saml11.Saml11SecurityTokenHandler.ValidateToken(SecurityToken token) at Microsoft.IdentityModel.Web.TokenReceiver.AuthenticateToken(SecurityToken token, Boolean ensureBearerToken, String endpointUri) at Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.SignInWithResponseMessage
What are the requirements for such pages?
Edited: I'm able to login using default sign in page. What I'd like to do is to change it to smth custom ideally without login form. I.e. Follow Login link [reditrected]-> login.live.com (enter credentials) [redirected] -> _layouts/login.aspx where form for adding users to the site is located
First variant in not correct so I decided to use
wctx param of the WS-Federation to get the Users PUID. So Request has
Wreply param which contains required information. The problem is that after being redirected to MySite I am redirected to
_layouts/Authenticate.aspx and the response is lost
The solution I see is to implement custom page that overrides default authentication aspx page.
So URL will contain
_layouts/MyAuthenticate.aspx instead of
I don't think its very good but sounds like possible solution.
What is good approach to retrieve the