Add Identity model config

web.config.xml

<system.identityModel>
  <identityConfiguration>
    <audienceUris>
      <add value="http://localhost:59820/" /> <!--Change this to match your business app's url -->
    </audienceUris>
    <issuerNameRegistry type="System.IdentityModel.Tokens.ConfigurationBasedIssuerNameRegistry, System.IdentityModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089">
      <trustedIssuers>
        <add thumbprint="1234567890ABCDEFGHIJKLMNOPQRSTUVWXYZ1234" name="YourSTSName" />
      </trustedIssuers>
    </issuerNameRegistry>
    <certificateValidation certificateValidationMode="None" />
  </identityConfiguration>
</system.identityModel>
<system.identityModel.services>
  <federationConfiguration>
    <cookieHandler requireSsl="false" />
    <!-- Change the issuer to the STS's url -->
    <wsFederation passiveRedirectEnabled="true" issuer="http://localhost:59171" realm="http://localhost:59820/" reply="http://localhost:59820" requireHttps="false" />
  </federationConfiguration>
</system.identityModel.services>