azure web角色中asp.net和acs的被动联合身份验证

我想使用Windows identity fondation framework在azure环境中部署我的azure web角色应用程序，但出现以下错误：

未找到指纹为9f217128ecd4f952479274eb09f1f3fd2199538a的证书

这是我的配置文件的一部分

 <federatedAuthentication>
      <cookieHandler requireSsl="false" />
      <wsFederation  passiveRedirectEnabled="true" issuer="https://webroboteu.accesscontrol.windows.net/v2/wsfederation" realm="http://webrobot/"  requireHttps="false" />
  </federatedAuthentication>
      <serviceCertificate>
         <certificateReference  x509FindType="FindByThumbprint" findValue="my thumbprint" />
      </serviceCertificate>
  <certificateValidation certificateValidationMode="None"   />

---

当我删除federatedAuthentication标记时，问题不存在，但在被动模式下是必要的

您是否已将证书添加到您的证书存储中？我使用simmetric密钥和带有SWT令牌的DPE.OAuth库我认为serviceCertificate标记是不必要的

    <add type="Microsoft.Samples.DPE.OAuth.Tokens.MachineKeySessionSecurityTokenHandler,  
        Microsoft.Samples.DPE.OAuth" />
    <remove type="Microsoft.IdentityModel.Tokens.SessionSecurityTokenHandler, 
        Microsoft.IdentityModel, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35"></remove>

                <add type="Microsoft.Samples.DPE.OAuth.Tokens.SimpleWebTokenHandler, Microsoft.Samples.DPE.OAuth" />
  </securityTokenHandlers>
  <issuerTokenResolver type="Microsoft.Samples.DPE.OAuth.ProtectedResource.ConfigurationBasedIssuerTokenResolver, Microsoft.Samples.DPE.OAuth">
    <serviceKeys>
      <add serviceName="http://webrobot/" serviceKey="my simmetric key" />
    </serviceKeys>
  </issuerTokenResolver>