具有用于身份验证的ADFS的Azure Web应用程序-无法创建以从federationmetadata获取配置

我正在尝试设置Azure Web应用程序，以使用ADFS服务器进行身份验证（该服务器也托管在Azure上的VM上）。我正在使用一个由VisualStudio自动生成的.NETMVC项目。我只是用这个来测试。我在创建项目时将“身份验证”更改为指向我的federation.xml文件。以下是堆栈跟踪输出：

[InvalidOperationException: IDX10803: Unable to create to obtain configuration from: https://<DNS-OF-ADFS-SERVER>.eastus.cloudapp.azure.com/federationmetadata/2007-06/federationmetadata.xml'.]
   Microsoft.IdentityModel.Protocols.<GetConfigurationAsync>d__3.MoveNext() +1781
   System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) +92
   System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +58
   Microsoft.Owin.Security.WsFederation.<ApplyResponseChallengeAsync>d__c.MoveNext() +433
   System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) +92
   System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +58
   Microsoft.Owin.Security.Infrastructure.<ApplyResponseCoreAsync>d__b.MoveNext() +282
   System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) +92
   System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +58
   Microsoft.Owin.Security.Infrastructure.<ApplyResponseAsync>d__8.MoveNext() +275
   System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) +92
   System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +58
   Microsoft.Owin.Security.Infrastructure.<TeardownAsync>d__5.MoveNext() +160
   System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) +92
   System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +58
   Microsoft.Owin.Security.Infrastructure.<Invoke>d__0.MoveNext() +815
   System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) +92
   System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +58
   Microsoft.Owin.Host.SystemWeb.IntegratedPipeline.<RunApp>d__5.MoveNext() +182
   System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) +92
   System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +58
   Microsoft.Owin.Security.Infrastructure.<Invoke>d__0.MoveNext() +638
   System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) +92
   System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +58
   Microsoft.Owin.Host.SystemWeb.IntegratedPipeline.<RunApp>d__5.MoveNext() +182
   System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) +92
   System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +58
   Microsoft.Owin.Host.SystemWeb.IntegratedPipeline.<DoFinalWork>d__2.MoveNext() +180
   Microsoft.Owin.Host.SystemWeb.IntegratedPipeline.StageAsyncResult.End(IAsyncResult ar) +69
   Microsoft.Owin.Host.SystemWeb.IntegratedPipeline.IntegratedPipelineContext.EndFinalWork(IAsyncResult ar) +65
   System.Web.AsyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +380
   System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +155

[InvalidOperationException:IDX10803:无法创建以从以下位置获取配置：https://.eastus.cloudapp.azure.com/federationmetadata/2007-06/federationmetadata.xml'.]
Microsoft.IdentityModel.Protocols.d_3.MoveNext（）+1781
System.Runtime.CompilerServices.TaskWaiter.ThrowForNonSuccess（任务任务）+92
System.Runtime.CompilerServices.TaskWaiter.HandleNonSuccessAndDebuggerNotification（任务）+58
Microsoft.Owin.Security.WsFederation.d_uc.MoveNext（）+433
System.Runtime.CompilerServices.TaskWaiter.ThrowForNonSuccess（任务任务）+92
System.Runtime.CompilerServices.TaskWaiter.HandleNonSuccessAndDebuggerNotification（任务）+58
Microsoft.Owin.Security.Infrastructure.d_ub.MoveNext（）+282
System.Runtime.CompilerServices.TaskWaiter.ThrowForNonSuccess（任务任务）+92
System.Runtime.CompilerServices.TaskWaiter.HandleNonSuccessAndDebuggerNotification（任务）+58
Microsoft.Owin.Security.Infrastructure.d_u8.MoveNext（）+275
System.Runtime.CompilerServices.TaskWaiter.ThrowForNonSuccess（任务任务）+92
System.Runtime.CompilerServices.TaskWaiter.HandleNonSuccessAndDebuggerNotification（任务）+58
Microsoft.Owin.Security.Infrastructure.d_u5.MoveNext（）+160
System.Runtime.CompilerServices.TaskWaiter.ThrowForNonSuccess（任务任务）+92
System.Runtime.CompilerServices.TaskWaiter.HandleNonSuccessAndDebuggerNotification（任务）+58
Microsoft.Owin.Security.Infrastructure.d_u0.MoveNext（）+815
System.Runtime.CompilerServices.TaskWaiter.ThrowForNonSuccess（任务任务）+92
System.Runtime.CompilerServices.TaskWaiter.HandleNonSuccessAndDebuggerNotification（任务）+58
Microsoft.Owin.Host.SystemWeb.IntegratedPipeline.d_u5.MoveNext（）+182
System.Runtime.CompilerServices.TaskWaiter.ThrowForNonSuccess（任务任务）+92
System.Runtime.CompilerServices.TaskWaiter.HandleNonSuccessAndDebuggerNotification（任务）+58
Microsoft.Owin.Security.Infrastructure.d_u0.MoveNext（）+638
System.Runtime.CompilerServices.TaskWaiter.ThrowForNonSuccess（任务任务）+92
System.Runtime.CompilerServices.TaskWaiter.HandleNonSuccessAndDebuggerNotification（任务）+58
Microsoft.Owin.Host.SystemWeb.IntegratedPipeline.d_u5.MoveNext（）+182
System.Runtime.CompilerServices.TaskWaiter.ThrowForNonSuccess（任务任务）+92
System.Runtime.CompilerServices.TaskWaiter.HandleNonSuccessAndDebuggerNotification（任务）+58
Microsoft.Owin.Host.SystemWeb.IntegratedPipeline.d_u2.MoveNext（）+180
Microsoft.Owin.Host.SystemWeb.IntegratedPipeline.StageAsyncResult.End（IAsyncResult ar）+69
Microsoft.Owin.Host.SystemWeb.IntegratedPipeline.IntegratedPipelineContext.EndFinalWork（IAsyncResult ar）+65
System.Web.AsyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute（）+380
System.Web.HttpApplication.ExecuteStep（IExecutionStep步骤，布尔值&同步完成）+155

我正在使用自签名证书。federationmetadata页面在Microsoft Edge中加载良好

我唯一修改的是web.config文件：

<add key="ida:ADFSMetadata" value="https://<DNS-OF-ADFS-SERVER>.eastus.cloudapp.azure.com/federationmetadata/2007-06/federationmetadata.xml"/>
<add key="ida:Wtrealm" value="https://<AzureWebAppName>.azurewebsites.com/" />

---

对于以后阅读本文的其他人来说，问题可能是因为您使用的是自签名证书。我很高兴，因为这是非生产性的。此链接将帮助您：