diff --git a/src/Microsoft.IdentityModel.Tokens/Validation/ValidationParameters.cs b/src/Microsoft.IdentityModel.Tokens/Validation/ValidationParameters.cs
index b4a792a1cb..f2aa5e8bf4 100644
--- a/src/Microsoft.IdentityModel.Tokens/Validation/ValidationParameters.cs
+++ b/src/Microsoft.IdentityModel.Tokens/Validation/ValidationParameters.cs
@@ -93,6 +93,7 @@ protected ValidationParameters(ValidationParameters other)
_signatureValidator = other.SignatureValidator;
TimeProvider = other.TimeProvider;
TryAllDecryptionKeys = other.TryAllDecryptionKeys;
+ TryAllIssuerSigningKeys = other.TryAllIssuerSigningKeys;
TokenDecryptionKeyResolver = other.TokenDecryptionKeyResolver;
_tokenDecryptionKeys = other.TokenDecryptionKeys;
TokenReplayCache = other.TokenReplayCache;
@@ -114,6 +115,7 @@ public ValidationParameters()
LogTokenId = true;
SaveSigninToken = false;
TryAllDecryptionKeys = true;
+ TryAllIssuerSigningKeys = true;
ValidateActor = false;
}
@@ -529,7 +531,8 @@ public TokenReplayValidationDelegate TokenReplayValidator
/// If the IssuerSigningKeyResolver is unable to resolve the key when validating the signature of the SecurityToken,
/// all available keys will be tried.
///
- /// Default is false.
+ /// Default is true.
+ [DefaultValue(true)]
public bool TryAllIssuerSigningKeys { get; set; }
///
@@ -642,6 +645,7 @@ internal set
/// Gets or sets a boolean that controls if the actor claim should be validated.
///
/// Default value is false.
+ [DefaultValue(false)]
public bool ValidateActor { get; set; }
}
}