I am currently getting this exception: "System.ServiceModel.FaultException: ID3082: The request scope is not valid or is unsupported."

I can't figure out how to solve this exception - The code I use is pasted in below.

@inherits Umbraco.Web.Mvc.UmbracoTemplatePage
@using System
@using System.Text
@using System.Net
@using System.Net.Http
@using System.Net.Http.Headers
@using System.ServiceModel
@using System.ServiceModel.Channels
@using System.Security.Cryptography.X509Certificates
@using System.IdentityModel
@using System.IdentityModel.Tokens
@using System.ServiceModel.Security
@using System.IdentityModel.Protocols.WSFederation
@using System.IdentityModel.Protocols.WSTrust
@using Thinktecture.IdentityModel
@using Thinktecture.IdentityModel.Http
@using Thinktecture.IdentityModel.Extensions
@using Thinktecture.IdentityModel.Constants
@using Thinktecture.IdentityModel.Metadata
@using Thinktecture.IdentityModel.Tokens
@using Thinktecture.IdentityModel.WSTrust

@{
    Layout = null;

    const string adfs = "adfs.address.dk"; 
    const string serviceIdentifier = "http://my.site.dk";
    const string serviceAccountUsername = "USERNAME";
    const string serviceAccountPassword = "PASSWORD";

    var tokenXml = GetSecurityToken(
        string.Format("https://{0}/adfs/services/trust/13/usernamemixed", adfs),
        serviceIdentifier,
        serviceAccountUsername,
        serviceAccountPassword);

    var authorizationHeaderPayload = DeflatedSamlEncode(tokenXml);
    @tokenXml

    using (var client = new HttpClient()){
        client.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Bearer",authorizationHeaderPayload);
        var result = client.GetAsync("https://address.to.service.dk/").Result;
        result.EnsureSuccessStatusCode();
        // work with result from service
    }
}

@functions{
    public static string GetSecurityToken(string wsTrustEndpoint, string identifier, string serviceAccountUsername, string serviceAccountPassword){
        WSTrustChannelFactory factory = new WSTrustChannelFactory(new UserNameWSTrustBinding(SecurityMode.TransportWithMessageCredential), wsTrustEndpoint);
        factory.TrustVersion = TrustVersion.WSTrust13;

        factory.Credentials.ServiceCertificate.Authentication.CertificateValidationMode = X509CertificateValidationMode.None;
        factory.Credentials.ServiceCertificate.Authentication.RevocationMode = X509RevocationMode.NoCheck;

        factory.Credentials.UserName.UserName = serviceAccountUsername;
        factory.Credentials.UserName.Password = serviceAccountPassword;

        var rst = new RequestSecurityToken {
            RequestType = WSTrust13Constants.RequestTypes.Issue,
            AppliesTo = new EndpointReference(identifier),
            KeyType = WSTrust13Constants.KeyTypes.Bearer,
        };

        var channel = factory.CreateChannel();
        GenericXmlSecurityToken token = (GenericXmlSecurityToken)channel.Issue(rst);
        return token.TokenXml.OuterXml;
    }

    public static string DeflatedSamlEncode(string token){
        var bytes = Encoding.UTF8.GetBytes(token);
        var deflatedBytes = new DeflateCookieTransform().Encode(bytes);
        var base64String = Convert.ToBase64String(deflatedBytes);
        var urlEncodedString = HttpUtility.UrlEncode(base64String);
        return urlEncodedString;
        return bytes.ToString();
    }
}

No not really - It's just a quick and dirty test!

Got it to work though! There was an issue on the identity provider server.