<configuration>

	<configSections>
		<section name="system.identityModel" type="System.IdentityModel.Configuration.SystemIdentityModelSection, System.IdentityModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089"/>
		<section name="system.identityModel.services" type="System.IdentityModel.Services.Configuration.SystemIdentityModelServicesSection, System.IdentityModel.Services, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089"/>
	</configSections>

	<appSettings>
		<add key="WebAuth-StsLogoutUrl" value="https://adminstg.wolterskluwerfs.com/STS/logout" />
	</appSettings>

	<system.identityModel>
		<identityConfiguration>
			<audienceUris>
				<add value="https://stg-documentation.wolterskluwerfs.com"/>
			</audienceUris>
			<issuerNameRegistry type="System.IdentityModel.Tokens.ConfigurationBasedIssuerNameRegistry, System.IdentityModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089">
				<trustedIssuers>
					<add thumbprint="2CD53F1407E5352ABFE3F64F9E4FC980350A2023" name="STS"/>
				</trustedIssuers>
			</issuerNameRegistry>
			<certificateValidation certificateValidationMode="None"/>
			<claimsAuthenticationManager type="WebAuth.ClaimsRoleModule, WebAuth"/>

	<securityTokenHandlers>
		<add type="System.IdentityModel.Services.Tokens.MachineKeySessionSecurityTokenHandler, System.IdentityModel.Services, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />
		<remove type="System.IdentityModel.Tokens.SessionSecurityTokenHandler, System.IdentityModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />
	</securityTokenHandlers>

	</identityConfiguration>
	</system.identityModel>

	<system.identityModel.services>
		<federationConfiguration>

	<cookieHandler requireSsl="true" />

    

	</federationConfiguration>
	</system.identityModel.services>

	<system.web>
	<customErrors mode="Off"/>
	<globalization fileEncoding="utf-8" requestEncoding="utf-8" responseEncoding="utf-8" culture="en-US" uiCulture="en-US" />
	<httpRuntime targetFramework="4.5.2"/>
	<authentication mode="None" />
	<compilation debug="true" targetFramework="4.5.2">
		<buildProviders>
			<add extension=".html" type="System.Web.Compilation.PageBuildProvider" />
		</buildProviders>
	</compilation>

	</system.web>

	<location path="AuthDisplay.ashx">
		<system.web>
			<authorization>
				<deny users="?" />
			</authorization>
		</system.web>
	</location>

	<system.webServer>
		<rewrite>
			<rules>
				<rule name="Remove_Help_Directory" stopProcessing="true">
					<match url="^Help/(.*)" />
					<action type="Rewrite" url="/{R:1}" appendQueryString="true" />
				</rule>
				<rule name="http to https" stopProcessing="true">
					<match url="(.*)" />
					<conditions>
						<add input="{HTTPS}" pattern="^OFF$" />
					</conditions>
					<action type="Redirect" url="https://{HTTP_HOST}/{R:1}" redirectType="SeeOther" />
				</rule>
			</rules>
		</rewrite>
		<modules>
			<add name="WSFederationAuthenticationModule" type="System.IdentityModel.Services.WSFederationAuthenticationModule, System.IdentityModel.Services, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" preCondition="managedHandler"/>
			<add name="SessionAuthenticationModule" type="System.IdentityModel.Services.SessionAuthenticationModule, System.IdentityModel.Services, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" preCondition="managedHandler"/>
		</modules>
		<handlers>
			<add name="HTMLFiles" path="*.html" verb="*" type="System.Web.UI.PageHandlerFactory" resourceType="Unspecified" requireAccess="Script" />
			<add name="RootHandler" verb="*" path="/" type="WebAuth.Handlers.RootHandler, WebAuth"/>
			<add name="TokenScriptHandler" verb="*" path="/Token.json" type="WebAuth.Handlers.TokenScriptHandler, WebAuth"/>
			<add name="SessionCleanup" verb="*" path="/usersession/cleanup" type="WebAuth.Handlers.EndSessionHandler, WebAuth"/>
			<add name="LogoutHandler" verb="*" path="/Logout.ashx" type="WebAuth.Handlers.LogoutHandler, WebAuth" />

	<!-- This Handler should not be enabled in Production -->
	<add name="AuthDisplayHandler" verb="*" path="/AuthDisplay.ashx" type="WebAuth.Handlers.AuthDisplayHandler, WebAuth"/>

	</handlers>
	</system.webServer>

</configuration>
