One nice “side-effect” of implementing all authentication methods at the Web API layer (MessageHandler) is, that you get hosting independence.

The exactly same configuration for the authentication handler also works in the Web API self-host.

I added the self-host sample to the github repository.