Monthly Archives: April 2015

ID0016 and ID2082: (setting) must be greater than TimeSpan.Zero.

YSOD in Identity Server: ID2082: Lifetime must be greater than or equal to TimeSpan.Zero. -and- ID0016: The value must specify a time span greater than TimeSpan.Zero. Parameter name: value This is another one of those “I want to kick myself” … Continue reading

Posted in Errors, Lessons Learned | Tagged | Leave a comment

When ASP.NET MVC is the right/wrong answer

Recently, I have had a few inquiries about my (earlier) posts on the topic of ASP.NET MVC. I guess they may have seemed mostly negative. Perhaps the positive statements were not so easy to pick-out. I would like to set … Continue reading

Posted in Methodology | Tagged | 1 Comment

ID1038: The AudienceRestrictionCondition was not valid because the specified Audience is not present in AudienceUris

When I changed the “Redirect URL” to use https, I got this error: ID1038: The AudienceRestrictionCondition was not valid because the specified Audience is not present in AudienceUris. Audience: ‘htt…/adfs/services/trust ‘ This one happened because 1) in the web.config (for … Continue reading

Posted in Errors, Lessons Learned | Tagged | Leave a comment

Return URL must be SSL (Identity Server)

YSOD: Return URL must be SSL This one is pretty obvious. Except for one thing: the web address has to use HTTPS in the Identity Server, Relying Party, Redirect URL config, but your actual redirect URL can be ordinary HTTP, … Continue reading

Posted in Errors, Lessons Learned | Tagged | Leave a comment

Identity Server v2 – Error 500

Sometimes Identity Server will just give an Error 500. Not a lot of information to work with. First, some simple triage steps to determine how bad it really is Have you (or someone that you know) recently changed anything? Take … Continue reading

Posted in Errors, Lessons Learned | Tagged | Leave a comment

Identity Server redirect URL

It really looks like you could use Identity Server for doing a quick little login and then bounce you into your site. I noticed a URL switch that was pretty promising: http://www.%5Bmy server].com/IdentityServer/account/login?ReturnUrl=… First, the wrong answer: do not use … Continue reading

Posted in Lessons Learned | Tagged | Leave a comment

WIF10201: No valid key mapping found for securityToken (part 2)

YSOD: Server Error in ‘/RPTestSite’ Application. WIF10201: No valid key mapping found for securityToken: ‘System.IdentityModel.Tokens.X509SecurityToken’ and issuer: ‘htt…com/IdentityServer’. This one was caused by Load-balanced Identity Servers. Somehow, my admin got two different certificates with similar names. Normally, if you are … Continue reading

Posted in Errors, Lessons Learned | Tagged | Leave a comment