.AddWsFederation(options => { //ADFS options.Wtrealm = "https://localhost/example/"; options.MetadataAddress = "https://adfs.example.be/federationmetadata/2007-06/federationmetadata.xml"; options.Events.OnSecurityTokenValidated = ctx => { var principal = ctx.Principal; ((ClaimsIdentity)principal.Identity).AddClaim(new Claim(ClaimTypes.Role, "Administrator")); return Task.CompletedTask; }; options.Events.OnRemoteFailure = ctx => Task.CompletedTask; options.TokenValidationParameters.ValidAudiences = new string[] { "https://localhost/example/" }; })