Questions tagged [identityserver3]

OpenID Connect Provider and OAuth 2.0 Authorization Server Framework based on Katana.

IdentityServer 3 (IdSrv3) is a .NET/Katana-based framework and hostable component that allows implementing single sign-on and access control for modern web applications and APIs using protocols like OpenID Connect and OAuth2. It supports a wide range of clients like mobile, web, SPAs and desktop applications and is extensible to allow integration in new and existing architectures.

1321 questions
6
votes
1 answer

Using an Identity Server signing certificate in Azure

In the IdentityServer sample code (startup.cs), we can see how to use a certificate: var certFile = env.ApplicationBasePath + "\\idsrv3test.pfx"; var signingCertificate = new X509Certificate2(certFile, "idsrv3test"); How do I do this in a…
Karl Gjertsen
  • 4,690
  • 8
  • 41
  • 64
6
votes
0 answers

Facilitate Single Sign On Between Asp.Net Forms Authentication and Asp.Net Core 1.0 with Framework

We have a multiple applications under one domain, and every application is built in asp.net mvc. Currently single sign on is facilitated using forms authentication, shared machine key. All applications are on same server for now. For one our new…
6
votes
2 answers

Check Session Iframe OpenIDConnect

I have a situation where I have an RP that does not explicitly require you to be logged into it. However I had a look at the session management specification for Open ID Connect, more specifically the check_session_iframe endpoint specification as…
Lutando
  • 4,909
  • 23
  • 42
6
votes
1 answer

Cannot Validate AccessToken with IdentityServer

We are using IdentityServer for authentication and we are validating the access token using JwtSecurityTokenHandler ValidateToken. This used to work fine, but after we upgraded our client application to ASP.NET Core 1.0 RTM (from RC1), the…
Antti Simonen
  • 964
  • 1
  • 14
  • 25
6
votes
1 answer

How do I use Windows auth with Identity Server 3?

My goal is a Angular app that consumes a web service, with users of the app/web service authenticated using Windows auth. Users should be able to log into a machine on our Windows domain, open a browser and use the Angular app without logging in…
6
votes
1 answer

How to run IdentityServer and WebAPI in same project

Currently I have an Identity server that runs perfectly, but I want to add an API on top of it to make some database configuration changes through a web front end. The examples in the docs show how to do this with MVC, but not WebAPI. The…
tVoss42
  • 554
  • 4
  • 16
6
votes
1 answer

Passing custom parameters to Identity Server 3

I am using Identity Server 3 + OpenID Connect + OAuth 2.0 to implement Single Sign On in one of my projects. I have set up everything according to samples provided and everything works just fine. I am using Implicit flow to authenticate user in…
6
votes
1 answer

Get IdentityServer3 to use existing user sql database

I am trying to authenticate a user against an existing user database. I have an existing database with a users table and I want the Identity Server to look at this database and get authenticate the user. I have found examples for MembershipReboot…
Carl Thomas
  • 3,605
  • 6
  • 38
  • 50
6
votes
1 answer

Problems de-serializing System.Security.Claims.Claim

I'm implementing an oAuth server and need to store refresh tokens, to do this I have (at the moment) chosen to serialize the tokens into JSON. While I can see that the JSON includes everything that would be needed to rehydrate, when I de-serialize…
andycwk
  • 826
  • 2
  • 9
  • 19
6
votes
1 answer

Refresh tokens using owin middleware and IdentityServer v3

I've recently setup IdentityServer v3 and its running like a dream, however I'm having troubles with the OWIN middleware. I would like to use the hybrid flow so I can refresh tokens in the backend without the user having to redirect back to the…
Yes
  • 308
  • 3
  • 11
6
votes
1 answer

Redirect to Identity Server Login page from AngularJs http web api request

I am trying to redirect to Identity Server's default login page when calling an API controller method from Angular's $http service. My web project and Identity Server are in different projects and have different Startup.cs files. The web project…
5
votes
1 answer

Identity server 4 in ASP.NET Core 3.1 with MongoDb

I am trying to implement Identity Server 4 with ASP.NET Core 3.1 and MongoDb. I found the example over here: https://github.com/souzartn/IdentityServer4.Samples.Mongo I am not sure is it good to use mongodb for identity server or SQL Server is…
San Jaisy
  • 15,327
  • 34
  • 171
  • 290
5
votes
1 answer

invalid_grant error IdentityServer 3 & asp.net core

I have an ASP.NET Core 2 MVC app using identity server 3 with Hybrid flow with an intention of fetching access tokens also which i can use further for accessing API's, sometimes I am redirected to the IDP login page and after entering username and…
CSharped
  • 1,247
  • 4
  • 20
  • 49
5
votes
2 answers

Dotnet Core authentication CorrelationFailed

I'm trying to setup authentication on a brand new dotnet core app. I'm using IdentityServer that is working fine as it is being used for other apps. I get an error that does not say much more than "Correlation Failed". Looking at the output in…
Georges Legros
  • 2,494
  • 2
  • 23
  • 42
5
votes
2 answers

How should you secure a multi-tenant API with Identity Server?

I'm struggling with the correct way to secure a multi-tenant Web API with Identity Server. Let me explain. We have a multi-tenant Web API that serves a ASP.NET MVC application. Each new customer is assigned a new TenantId. A customer can have…