Quantcast
Channel: SharePoint 2010 - General Discussions and Questions forum
Viewing all articles
Browse latest Browse all 17574

The issuer of the token is not a trusted issuer - Problem with redirect to Sharepoint

$
0
0

Hi,

   I created custom STS and was trying to redirect user to Sharepoint portal after he authenticates correctly. I copy certificate generated by STS and pass to Sharepoint as SPTrustedRootAuthority. Unfortunately when I pass user credentials after click login button I got error like this:

System.IdentityModel.Tokens.SecurityTokenException: The issuer of the token is not a trusted issuer.    at Microsoft.SharePoint.IdentityModel.SPLocalIssuerNameRegistry.GetIssuerName(SecurityToken securityToken)     at Microsoft.SharePoint.IdentityModel.SPPassiveIssuerNameRegistry.GetIssuerName(SecurityToken securityToken)     at Microsoft.IdentityModel.Tokens.Saml11.Saml11SecurityTokenHandler.CreateClaims(SamlSecurityToken samlSecurityToken)     at Microsoft.IdentityModel.Tokens.Saml11.Saml11SecurityTokenHandler.ValidateToken(SecurityToken token)     at

Hmm..certificate seems to be ok, ThumbPrint is the same for certificate in STS and this one added to Sharepoint. When I did command as Get-SPTrustedIdentityTokenIssuer I got:

ProviderUri                  : http://localhost:9999/
DefaultProviderRealm         : http://localhost
ProviderRealms               : {}
ClaimTypes                   : {http://schemas.xmlsoap.org/ws/2005/05/identity/
                               claims/authentication, http://schemas.xmlsoap.or
                               g/ws/2005/05/identity/claims/name}
HasClaimTypeInformation      : True
ClaimTypeInformation         : {UserID, Display Name}
IdentityClaimTypeInformation : Microsoft.SharePoint.Administration.Claims.SPTru
                               stedClaimTypeInformation
ClaimProviderName            :
UseWReplyParameter           : False
Description                  : Custom STS
SigningCertificate           : [Subject]
                                 CN=STSTestCert

                               [Issuer]
                                 CN=STSTestCert

                               [Serial Number]
                                 34AE7B4B0F2D5BB4429EC2FB45F6BC0A

                               [Not Before]
                                 12/12/2012 6:38:42 PM

                               [Not After]
                                 12/13/2013 12:38:42 AM

                               [Thumbprint]
                                 0D67B015406C311B5DEE613F312D2B8BA40F85DD

Name                         : Facebook
TypeName                     : Microsoft.SharePoint.Administration.Claims.SPTru
                               stedLoginProvider
DisplayName                  : Facebook
Id                           : ef70c250-de61-432d-9478-cd7a30b28ae0
Status                       : Online
Parent                       : SPSecurityTokenServiceManager Name=SecurityToken
                               ServiceManager
Version                      : 401983
Properties                   : {}
Farm                         : SPFarm Name=SharePoint_Config
UpgradedPersistedProperties  : {}

Thanx for any help please.



Viewing all articles
Browse latest Browse all 17574

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>