The code combines them in the "validationParameters" parameter. Is it safe to assume that you already have checks for duplication in the TokenValidationParameters class? I guess it won't be critical if you have the same Issuer twice, but you will take a perf hit.