SteveSyfuhs

<system.identityModel>
  <identityConfiguration>
    <securityTokenHandlers>
      <add type="System.IdentityModel.Tokens.JwtSecurityTokenHandler, System.IdentityModel.Tokens.Jwt" />
    </securityTokenHandlers>
  </identityConfiguration>
<system.identityModel>

SteveSyfuhs

public class MySecurityTokenServiceConfiguration : SecurityTokenServiceConfiguration
{
  public MySecurityTokenServiceConfiguration()
  {
    ImportSecurityTokenHandlers();
  }

  private void ImportSecurityTokenHandlers()
  {
    SecurityTokenHandlers.AddOrReplace(new JwtSecurityTokenHandler());

SteveSyfuhs

protected override Scope GetScope(ClaimsPrincipal principal, RequestSecurityToken request)
{
  bool appRequiresJwt = true;
  
  if (appRequiresJwt) 
  {
      request.TokenType = "urn:ietf:params:oauth:token-type:jwt";
  }
  
  return WhateverYouDoToGenerateScope(principal, request);

SteveSyfuhs

var resp = channel.Issue(new RequestSecurityToken()
{
  RequestType = RequestTypes.Issue,
  TokenType = "urn:ietf:params:oauth:token-type:jwt",
  AppliesTo = new EndpointReference("http://azureservices/AdminSite")
}, out rstr);

SteveSyfuhs

Set-MgmtSvcRelyingPartySettings -Target Admin -MetadataEndpoint 
"https://sts.syfuhs.net/federationmetadata/2007-06/federationmetadata.xml" -Server localhost\sqlexpress

SteveSyfuhs

{
 "Realm":"http://azureservices/WindowsAuthSite",
 "Endpoint":"https://adminauth-cloud.syfuhs.net/wsfederation/issue",
 "Certificates":[
    "MIIC6...KnOXw=="
 ]
}

SteveSyfuhs

unprotect-MgmtSvcConfiguration -Namespace TenantSite

SteveSyfuhs

{  
   "data":{  
      "id":"1100007A",
      "type":"1",
      "detector":"SBM20",
      "cpm":22,
      "temperature":23.31,
      "uptime":107522
   }
}

SteveSyfuhs

SteveSyfuhs

using CertLib;
using System;
using System.Security.Cryptography;
using System.Security.Cryptography.X509Certificates;

namespace KeyGenSigning
{
    class Program
    {
        static void Main(string[] args)