Security token service (STS) certificate validation wasn't performed because the TokenIssuerMetadataEpr property isn't set ...