Problem with using infocard

Hi

I am trying to build a service that uses infocard mode of authentication. The service uses a WsFederation binding. The problem is that when the client selects a card and sends it across the system throws an error as follows

"An unsecured or incorrectly secured fault was received from the other party. See the inner FaultException for the fault code and detail."

Inner Exception

"An error occurred when processing the security tokens in the message."

Could some one tell me what the problem is..

Regards

Ragu

[619 byte] By [Raguvind] at [2007-12-24]
# 1

Could you set up tracing on the client and server side and send them to me at smason@microsoft.com?

Also, could you forward your config's as well?

Thanks!

Scott

ScottMason-MSFT at 2007-10-7 > top of Msdn Tech,Visual Studio Orcas,Windows Communication Foundation (Indigo)...
# 2
Are you using June or July CTP? June has issues that are fixed in July.
MicheleLerouxBustamante at 2007-10-7 > top of Msdn Tech,Visual Studio Orcas,Windows Communication Foundation (Indigo)...
# 3

Hi Michele

I am using july CTP.. but still facing the problem could help me out...

Thanks and regards

Ragu

Raguvind at 2007-10-7 > top of Msdn Tech,Visual Studio Orcas,Windows Communication Foundation (Indigo)...
# 4

Please provide your service and client config here. It will help to know what your certificate configuration is.

MicheleLerouxBustamante at 2007-10-7 > top of Msdn Tech,Visual Studio Orcas,Windows Communication Foundation (Indigo)...
# 5
Hello,I'm having the same problem.
Can anyone help please...


Here is config files:

Code Snippet
Code Snippet
Code Snippet

STS:

Code Snippet

<system.serviceModel>
<services>
<service
name="Fabrikam.TokenService.TokenService"
behaviorConfiguration="SampleSecurityTokenServiceBehavior"
>
<host>
<baseAddresses>
<add baseAddress="http://www.fabrikam.com:7000/TokenService/STS.svc" />
</baseAddresses>
</host>
<endpoint
address="SelfIssued"
contract="Microsoft.ServiceModel.Samples.SecurityTokenService.ISecurityTokenService"
binding="wsFederationHttpBinding"
bindingConfiguration="SelfIssuedSamlBinding"
/>
<endpoint
address="https://www.fabrikam.com:7001/TokenService/STS.svc/mex"
contract="IMetadataExchange"
binding="mexHttpsBinding"
/>
</service>
</services>

<bindings>
<wsFederationHttpBinding>
<binding name="SelfIssuedSamlBinding">
<security mode="Message">
<message
algorithmSuite="Basic128"
issuedKeyType="AsymmetricKey">
<issuer address="http://schemas.xmlsoap.org/ws/2005/05/identity/issuer/self" />
<claimTypeRequirements>
<add claimType="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier" />
</claimTypeRequirements>
</message>
</security>
</binding>
</wsFederationHttpBinding>
</bindings>

<behaviors>
<serviceBehaviors>
<behavior name="SampleSecurityTokenServiceBehavior">
<serviceMetadata httpGetEnabled="true" />
<serviceCredentials>
<serviceCertificate
storeLocation="LocalMachine"
storeName="My"
x509FindType="FindBySubjectName"
findValue="www.fabrikam.com"
/>
<issuedTokenAuthentication allowUntrustedRsaIssuers="true"/>
</serviceCredentials>
<serviceDebug includeExceptionDetailInFaults="true" />
</behavior>
</serviceBehaviors>
</behaviors>

</system.serviceModel>


CLIENT:

<system.serviceModel>
<client>
<endpoint
name="helloClient"
address="http://www.fabrikam.com:4123/helloService/helloEndpoint"
contract="HelloService.IHello"
behaviorConfiguration="helloClientBehavior"
binding="wsFederationHttpBinding"
bindingConfiguration="helloFederatedBinding">
<identity>
<certificateReference
findValue="www.fabrikam.com"
storeLocation="LocalMachine"
storeName="My"
x509FindType="FindBySubjectName" />
</identity>
</endpoint>
</client>

<bindings>
<wsFederationHttpBinding>
<binding name='helloFederatedBinding' closeTimeout="00:01:00" openTimeout="00:01:00" receiveTimeout="00:10:00"
sendTimeout="00:01:00" bypassProxyOnLocal="false" transactionFlow="false"
hostNameComparisonMode="StrongWildcard" maxBufferPoolSize="524288"
maxReceivedMessageSize="65536" messageEncoding="Text" textEncoding="utf-8"
useDefaultWebProxy="true">
<readerQuotas maxDepth="32" maxStringContentLength="8192" maxArrayLength="16384"
maxBytesPerRead="4096" maxNameTableCharCount="16384" />
<reliableSession ordered="true" inactivityTimeout="00:10:00"
enabled="false" />
<security mode='Message'>
<!--issuedTokenType="http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV1.1"-->
<message
algorithmSuite='Basic128'
issuedTokenType='urn:oasis:names:tc:SAML:1.0:assertion'
issuedKeyType='SymmetricKey'>
<!--<issuer address='http://schemas.xmlsoap.org/ws/2005/05/identity/issuer/self'/>-->
<issuer address='http://www.fabrikam.com:7000/TokenService/STS.svc/SelfIssued'/>
<claimTypeRequirements>
<clear/>
<add claimType="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier" />
<add claimType="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" />
</claimTypeRequirements>
</message>
</security>
</binding>
</wsFederationHttpBinding>
</bindings>

<behaviors>
<endpointBehaviors>
<behavior name='helloClientBehavior'>
<clientCredentials>
<serviceCertificate>
<authentication
trustedStoreLocation='LocalMachine'
revocationMode='NoCheck'/>
<defaultCertificate
findValue="www.fabrikam.com"
storeLocation="LocalMachine"
storeName="My"
x509FindType="FindBySubjectName" />
</serviceCertificate>
</clientCredentials>
</behavior>
</endpointBehaviors>
</behaviors>

</system.serviceModel>

SERVICE:

<system.serviceModel>

<services>
<service
name="HelloService.Hello"
behaviorConfiguration="helloServiceBehavior">
<endpoint
address="helloEndpoint"
contract="HelloService.IHello"
binding="wsFederationHttpBinding"
bindingConfiguration="helloFederatedBinding">
<identity>
<certificateReference
findValue="www.fabrikam.com"
storeLocation="LocalMachine"
storeName="My"
x509FindType="FindBySubjectName" />
</identity>
</endpoint>
<endpoint contract="IMetadataExchange" binding="mexHttpBinding" address="mex" />
</service>
</services>

<bindings>

<wsHttpBinding>
<binding name="helloBinding">
<security mode="Message">
<message clientCredentialType="IssuedToken" />
</security>
</binding>
</wsHttpBinding>
<wsFederationHttpBinding>
<binding name='helloFederatedBinding' >
<security mode='Message'>
<message algorithmSuite='Basic128'
issuedTokenType='urn:oasis:names:tc:SAML:1.0:assertion'
issuedKeyType='SymmetricKey'>
<issuer address='http://schemas.xmlsoap.org/ws/2005/05/identity/issuer/self'/>
<!--<issuer address='http://www.fabrikam.com:7000/TokenService/STS.svc/SelfIssued'/>-->
<claimTypeRequirements>
<clear/>
<add claimType="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress'" />
<add claimType="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier" />
</claimTypeRequirements>
</message>
</security>
</binding>
</wsFederationHttpBinding>

</bindings>

<behaviors>
<serviceBehaviors>
<behavior name='helloServiceBehavior' returnUnknownExceptionsAsFaults='true' >
<serviceMetadata httpGetEnabled="true" />
<serviceCredentials>
<issuedTokenAuthentication allowUntrustedRsaIssuers='true' />
<serviceCertificate
findValue='www.fabrikam.com'
storeLocation='LocalMachine'
storeName='My'
x509FindType='FindBySubjectName' />
</serviceCredentials>
</behavior>
</serviceBehaviors>
</behaviors>
<diagnostics performanceCounters="All" wmiProviderEnabled="true" >
<messageLogging logEntireMessage="true" logMalformedMessages="true" logMessagesAtServiceLevel="true" logMessagesAtTransportLevel="true" maxMessagesToLog="100000" />
</diagnostics>
</system.serviceModel>


Camafeus at 2007-10-7 > top of Msdn Tech,Visual Studio Orcas,Windows Communication Foundation (Indigo)...

Visual Studio Orcas

Site Classified