WIF配置说明

<configuration>
  <configSections>
    <!--添加 WIF 4.5 sections ；如下两条-->
    <section name="system.identityModel" type="System.IdentityModel.Configuration.SystemIdentityModelSection, System.IdentityModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089"/>
    <section name="system.identityModel.services" type="System.IdentityModel.Services.Configuration.SystemIdentityModelServicesSection, System.IdentityModel.Services, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089"/>
  </configSections>  

  ...  

  <system.identityModel>  <!--启用 WIF 的相关配置根节点-->
    <identityConfiguration>  <!--标识一个服务配置节点；也可以使用name属性标识一个配置节点-->
      <audienceUris>  <!--指定依赖方RP的URI集合-->
        <add value="http://localhost/WebApplication1/" />
      </audienceUris>
      <!--配置指定令牌颁发者ISSUser，Type属性指定 都派生自IssuerNameRegistry-->
      <issuerNameRegistry type="System.IdentityModel.Tokens.ConfigurationBasedIssuerNameRegistry, System.IdentityModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089">
        <trustedIssuers>
          <add thumbprint="313D3B … 9106A9EC" name="SelfSTS" />
        </trustedIssuers>
      </issuerNameRegistry>
      <certificateValidation certificateValidationMode="None"/>
    </identityConfiguration>
  </system.identityModel>  

  ...  

</configuration>  

资料

微软资料：https://docs.microsoft.com/zh-cn/dotnet/framework/configure-apps/file-schema/windows-identity-foundation/