I'm trying to understand WIF and AD FS. I found a lot of useful information, but can't find any details on how WS FAM is validating token received from STS.
I found this sequence diagram which explains the process, but there in step 6 there is only annotation that token validation is handled by FAM. I found some resource on this too, but it doesn't seem to be too relevant.
What I'd like to know is if WIF is validating the token offline (based on some rules created when the trust with issuer was established or something) or online (by asking issuer itself). Should I even care?
Thanks!