Skip to content

Commit 00f851a

Browse files
committed
fix link issue
1 parent e9e04b7 commit 00f851a

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

support/entra/entra-id/app-integration/troubleshoot-wif10201-no-validkey-securitytoken-mvc.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ This article provides guidance for troubleshooting an authentication issue in an
1717

1818
The ASP.NET MVC application was working previously. However, the following error is now occurring without any changes to the application.
1919

20-
```dotnecli
20+
```
2121
Error Details:
2222
Server Error in '/' Application.
2323
WIF10201: No valid key mapping found for securityToken: ‘System.IdentityModel.Tokens.X509SecurityToken' and issuer: 'https://sts.windows.net/<Directory ID>/'.
@@ -29,9 +29,9 @@ Exception Details: System.IdentityModel.Tokens.SecurityTokenValidationException:
2929

3030
## Cause
3131

32-
Windows Identity Foundation uses the certificate thumbprint(s) in the web.config file (shown below) to verify the signature of the token returned from THE Entra ID upon successful sign in.
32+
Windows Identity Foundation uses the certificate thumbprint(s) in the web.config file as shown below to verify the signature of the token returned by the Entra ID upon a successful sign-in.
3333

34-
```
34+
```web.config
3535
<issuerNameRegistry type="System.IdentityModel.Tokens.ValidatingIssuerNameRegistry,
3636
System.IdentityModel.Tokens.ValidatingIssuerNameRegistry">
3737
<authority name="https://sts.windows.net/<Directory ID>/">
@@ -51,6 +51,6 @@ The error WIF10201 occurs when none of these certificate thumbprints match the o
5151

5252
The Entra ID uses a [signing key rollover mechanism](/entra/identity-platform/signing-key-rollover), which updates the certificate used to sign authentication tokens periodically. This key rollover causes the initial certificate thumbprints configured in the web.config file to become invalid, hence leading to the error.
5353

54-
### Solution
54+
## Solution
5555

56-
You can either update the certificate thumbprints in the web.config file manually or automate the process through code. For more information, see [Best practices for keys metadata caching and validation](/entra/identity-platform/signing-key-rollover#best-practices-for-keys-metadata-caching-and-validation)
56+
You can either update the certificate thumbprints in the web.config file manually or automate the process through code. For more information, see [Best practices for keys metadata caching and validation](/entra/identity-platform/signing-key-rollover#best-practices-for-keys-metadata-caching-and-validation).

0 commit comments

Comments
 (0)