<configuration>

  <configSections>

    <!--添加 WIF 4.5 sections ；如下两条-->

    <section name="system.identityModel" type="System.IdentityModel.Configuration.SystemIdentityModelSection, System.IdentityModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089"/>

    <section name="system.identityModel.services" type="System.IdentityModel.Services.Configuration.SystemIdentityModelServicesSection, System.IdentityModel.Services, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089"/>

  </configSections>  

  ...  

  <system.identityModel>  <!--启用 WIF 的相关配置根节点-->

    <identityConfiguration>  <!--标识一个服务配置节点；也可以使用name属性标识一个配置节点-->

      <audienceUris>  <!--指定依赖方RP的URI集合-->

        <add value="http://localhost/WebApplication1/" />

      </audienceUris>

      <!--配置指定令牌颁发者ISSUser，Type属性指定 都派生自IssuerNameRegistry-->

      <issuerNameRegistry type="System.IdentityModel.Tokens.ConfigurationBasedIssuerNameRegistry, System.IdentityModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089">

        <trustedIssuers>

          <add thumbprint="313D3B … 9106A9EC" name="SelfSTS" />

        </trustedIssuers>

      </issuerNameRegistry>

      <certificateValidation certificateValidationMode="None"/>

    </identityConfiguration>

  </system.identityModel>  

  ...  

</configuration>