Questions tagged [identityserver3]

OpenID Connect Provider and OAuth 2.0 Authorization Server Framework based on Katana.

IdentityServer 3 (IdSrv3) is a .NET/Katana-based framework and hostable component that allows implementing single sign-on and access control for modern web applications and APIs using protocols like OpenID Connect and OAuth2. It supports a wide range of clients like mobile, web, SPAs and desktop applications and is extensible to allow integration in new and existing architectures.

1321 questions
8
votes
2 answers

C# .NET: Server is not able to validate Angular Client [IdentityServer]

So I have the following setup: Frontend: AngularJS App Backend: WebApi with Identity Server to validate clients In my Backend I create a new in-memory client like so: new Client { Enabled = true, ClientId = "myapp.mycompany", ClientUri =…
Eric Bergman
  • 1,453
  • 11
  • 46
  • 84
8
votes
1 answer

IdentityServer Login with external provider not working for long login_hint or acr_values

In my OpenIdConnectAuthenticationOptions I set the OpenIdConnectAuthenticationNotifications RedirectToIdentityProvider It looks like this: RedirectToIdentityProvider = n => { if (n.ProtocolMessage.RequestType ==…
Florian K
  • 602
  • 9
  • 30
8
votes
2 answers

IdentityServer4 IdentityServer3.AccessTokenValidation

Happy new year to everyone... I configured an IdentityServer4, and I can make successful ASP.net Core web api calls. But for asp.net framework 4.5.2 web apis, I got {"Response status code does not indicate success: 401 (Unauthorized)."} error from…
8
votes
1 answer

How to do multiple-step login in IdentityServer4?

We were using IdentityServer3, implicit grant and the login consists of multiple screen. In IdentityServer3, there's built in support for such multiple step login workflow (for example for accepting EULA, two-factor login, etc.), The feature called…
8
votes
4 answers

Change default endpoint in IdentityServer 4

I was working around IdentityServer 4 (1.0.0-beta5). By default, the endpoint for authentication is: '/connect/token'. How can I change the default endpoints in IdentityServer, for instance to: '/api/login'? Thanks
8
votes
2 answers

How to get the claims out of a authenticated SecurityToken

I'm passing a token as a string into a SOAP service and have validated that the token is valid. I now have a SecurityToken that in debug mode I can see all the claims and specifically the userId claim I'd like to pass into another method. I can't…
user2197446
  • 1,065
  • 3
  • 15
  • 31
8
votes
2 answers

"No state in response" error with OIDC_CLIENT and angularJS

I am trying to replace the old oidc-token-manager with oidc-client in my angular app, but I keep getting this error "No state in response", I have look at brockallen sample to learn how to use it, but not luck so far. Here is what I have in my…
Peter
  • 123
  • 1
  • 9
8
votes
2 answers

Is 'sub' claim part of openid scope or profile scope?

As per the OpenID Connect specification is sub claim part of openid scope or profile scope? I could not find that information Update1 I am using IdentityServer3 for authentication. Client is making the request to the server as below. In response I…
LP13
  • 30,567
  • 53
  • 217
  • 400
8
votes
1 answer

Identity Server and User Impersonation

I have two sites https://www.somesite.com (user site) and https://admin.anothersite.com (admin site) and I am using Identity Server 3 for access control, this is hosted on https://identity.somesite.com. The sites are configured in identity server…
ilivewithian
  • 19,476
  • 19
  • 103
  • 165
8
votes
2 answers

Identity Server 3 - 401 on Ajax Calls instead of 302

I have a web api / mvc hybrid app and I have configured it to use cookie authentication. This works fine for the mvc portion of the application. The web api does enforce the authorization, but instead of returning a 401 - Unauthorised it returns a…
ilivewithian
  • 19,476
  • 19
  • 103
  • 165
8
votes
5 answers

CORS in Ajax-requests against an MVC controller with IdentityServer3-authorization

I'm currently working on site that uses various Ajax-requests to save, load and autocomplete data. It is build using C#, MVC and JQuery. All actions on the MVC controllers require the users to be authorized, and we use IdentityServer3 for…
user4963261
8
votes
3 answers

IdentityServer3: Some Claims not being returned from identity server

Context: I am using ASP.NET MVC with OWIN self host. Below are the rest of the configs/setup. In my Clients in identity server (notice the AllowedScopes set): public static class InMemoryClientSource { public static List
jerbersoft
  • 4,344
  • 9
  • 42
  • 48
7
votes
3 answers

Unable to find DiscoveryClient for IdentityServer4

Trying to access discovery client for acceising other endpoints anf following with, http://docs.identityserver.io/en/aspnetcore1/endpoints/discovery.html Installed IdentityModel nuget package in .Net 7.5 MVC application. But unable to find the…
Cod29
  • 265
  • 4
  • 14
7
votes
1 answer

IdentityServer3 idsrv.partial cookie gets too big

After login when redirecting the user using context.AuthenticateResult = new AuthenticateResult(, subject, name, claims) the partial cookie gets so big that it contains up to 4 chunks and ends up causing "request too big" error. The…
danijels
  • 5,211
  • 4
  • 26
  • 36
7
votes
1 answer

Sitecore 9 Federated Authentication with IdentityServer3, Endless Loop

I've been struggling to get Federated Authentication working with Sitecore 9 using IdentityServer 3 as the IDP. I've followed the example seen in…