Required custom ASP.NET OWIN TokenValidator

I have a project working in federation environment, Im using this code for the federation [login to view URL] and using exactly this code: public void Configuration(IAppBuilder app) { // For more information on how to configure your application, visit [login to view URL] [login to view URL]([login to view URL]); //SecurityKey key = null; //X509Certificate2 cert = null; //CertificateSetting(certificate_path, out cert, out key); [login to view URL](new CookieAuthenticationOptions()); [login to view URL]( new WsFederationAuthenticationOptions { MetadataAddress = metadataAddress, Wtrealm = realm, Wreply = url+"/", Configuration = new WsFederationConfiguration() { TokenEndpoint = issuer, }, TokenValidationParameters = new [login to view URL]() { ValidateIssuerSigningKey=false, ValidateAudience=false, RequireSignedTokens=false, SaveSigninToken=true, ValidateTokenReplay=false, //TokenDecryptionKey=key } } ); } The token is comming from the ADFS server correctly, but there is error: IDX10500: Signature validation failed. No security keys were provided to validate the signature And looks there should be a custom validation to implement instead of the default. I read this document, but I need someone professional to make that working correctly: [login to view URL]