title: WCF WIF token could not be authenticated or authorized
body: <p>I have a MVC site that athenticates with an STS and then calls a webservice.</p>
  
  <p>I'm opening the channel using the token just fine but i get the following error on a method call.  I'm using the ws2007federatedbindings and have tried every example i could find all resulting in the same error.  I have validate the token is issued correctly for the service, at least 99% sure.  =)</p>
  
  <blockquote>
    <p>{"ID3242: The security token could not be authenticated or
    authorized."}</p>
  </blockquote>
  
  <p>When i enable tracing, I do find these message, but I'm not sure where to even start looking.</p>
  
  <p>This warning in the WCF service</p>
  
  <blockquote>
    <p>The configuration system has detected a duplicate key in a different configuration scope and is overriding with the more recent value.</p>
  </blockquote>
  
  <p>This error in the WCF service</p>
  
  <blockquote>
    <p>Message security verification failed.</p>
  </blockquote>
  
  <p>This error in the MVC trace</p>
  
  <blockquote>
    <p>Security processor was unable to find a security header in the message. This might be because the message is an unsecured fault or because there is a binding mismatch between the communicating parties.
    This can occur if the service is configured for security and the client is not using security.</p>
  </blockquote>
  
  <p><strong>EDIT</strong></p>
  
  <p>It appears that the audienceUris is case sensitive.  =/</p>
  
  <p>I'm still trying to figure out what the duplicate key in different configuration scope warning means but I no longer get the ID3242 error and it delegates to the wcf service correctly.  Dominick Baier has been super helpful in figuring it out.  I recommend his blog <a href="http://www.leastprivilege.com/" rel="nofollow">http://www.leastprivilege.com/</a></p>