in wwauth/Google.Solutions.WWAuth/Data/CredentialConfiguration.cs [74:95]
public void Validate()
{
if (string.IsNullOrEmpty(this.Options.IssuerUrl))
{
throw new InvalidCredentialConfigurationException("AD FS Issuer URL must be specified.");
}
if (string.IsNullOrEmpty(this.Options.RelyingPartyId))
{
throw new InvalidCredentialConfigurationException("Relying party ID must be specified.");
}
if (!string.IsNullOrEmpty(this.ServiceAccountEmail) &&
!this.ServiceAccountEmail.EndsWith(".iam.gserviceaccount.com"))
{
throw new InvalidCredentialConfigurationException(
$"{this.ServiceAccountEmail} is not a valid service account email address");
}
this.PoolConfiguration.Validate();
}