Questions tagged [identityserver3]

OpenID Connect Provider and OAuth 2.0 Authorization Server Framework based on Katana.

IdentityServer 3 (IdSrv3) is a .NET/Katana-based framework and hostable component that allows implementing single sign-on and access control for modern web applications and APIs using protocols like OpenID Connect and OAuth2. It supports a wide range of clients like mobile, web, SPAs and desktop applications and is extensible to allow integration in new and existing architectures.

1321 questions
4
votes
1 answer

Email cannot be null or empty while creating new user?

I am using IdentityServer 3 for authentication. I am storing users in SQL DB using asp.net identity framework. IndentityServer team has provided simple IdentityManager.AspNetIdentity library for administrators to manage users. I followed the video…
LP13
  • 30,567
  • 53
  • 217
  • 400
4
votes
1 answer

WebAPI Authorization Attribute not being called with IdentityServer3 Bearer Token

I have a WebAPI 2 project that uses a token issued by an IdentityServer3 token provider. In my Startup.cs file I have the IdentityServerBearerTokenAuthorization middleware implemented and it, along with a global AuthorizateAttribute filter, is…
Mike
  • 1,718
  • 3
  • 30
  • 58
4
votes
1 answer

Identity Server 3 User Session Lifetime

I'm securing a web app with identity server 3. My app is split into 2 oidc clients a ASP.Net MVC client and a javascript(angular) client which uses the oidc-client javascript library. When a user first visits the web app we redirect for log in to…
Twisted
  • 2,939
  • 4
  • 32
  • 54
4
votes
3 answers

Is there a way to achieve Dynamic Client Registration with IdentityServer?

Our company has an SSO app that I'm looking to replace a significant chunk of the authentication pipeline with IdentityServer4 or 3. The version I'm replacing has its own custom implementation of Dynamic Client Registration (not to spec) and a UI to…
user545680
4
votes
1 answer

IdentityServer used as external identity provider for another IdentityServer fails to properly redirect

When using any of the standard identity providers (Google, Facebook) after logging in and consent they redirect to my primary Identity Server and let it redirect to implicit client registered within it. How can I achieve the same behavior with…
xmichaelx
  • 569
  • 1
  • 6
  • 17
4
votes
1 answer

IdentitySever3 Redirect Url for multiple domains

Given A ASP MVC website in IIS. The site authenticated the users with an identityserver with an impicit flow. There are mutiple domains assiged to it. So the website is called from different domains. for example. foo.com foo.de foo.fr Problem Now…
Boas Enkler
  • 12,264
  • 16
  • 69
  • 143
4
votes
0 answers

How to keep IdentityServer Access Token expiration in sync with cookie expiration

I have set up identity server 3 in line with the mvc api sample. However, I am finding that while the cookie expiration is working with a sliding expiration the access token expiration is not being updated. This results in our api being called with…
Peter M
  • 546
  • 5
  • 6
4
votes
3 answers

c# Identity Server Bad Request - Request Too Long

I have an odd issue that I am trying to track down. If I deploy my client and Identity Server to Azure, using a self signed certificate then the code works. I have now moved it to our UAT environment, where the identity server is configured to use a…
Matt
  • 1,596
  • 2
  • 18
  • 32
4
votes
1 answer

Okta Kentor.AuthServices IdentityServer3 IDP-initiated SSO is triggering SP-initiated SSO - error or design?

Using IdentityServer3, Kentor.AuthServices 0.19 (with OWIN middleware) and a standard MVC 4 WebApi 2 app, we have followed instructions at https://github.com/KentorIT/authservices/blob/master/doc/IdentityServer3Okta.md and it appeared that we…
Jeremy Noble
  • 183
  • 1
  • 13
4
votes
1 answer

How to set Initial Catalog in connection string for Oracle?

I'm trying to setup IdentityServer3 to work with Oracle database. I've got working MSSQL solution and I need Oracle variation too. During initialization I get following error. It looks like provider reaches timeout (30-45 s) and then throws the…
pizycki
  • 1,249
  • 4
  • 14
  • 26
4
votes
1 answer

Check if access token is valid - Identity Server

I am using Identity Server4 for a proof of concept project.I have implemented the identity server and I can receive an access token when I authenticate successfully. For authentication I use, the following…
Libin Joseph
  • 7,070
  • 5
  • 29
  • 52
4
votes
4 answers

how to disable auto login in thinktecture IdentityServer

i have a MVC app with authorization managed by identityserver. When i access first time to my web, it is redirect to identityserver loggin page and after i am redirected to my web again. My problem is, if i logout of identityserver, when i access…
Sem
  • 73
  • 1
  • 6
4
votes
1 answer

IdentityServer Authentication AspCore and Angular Client bestpractice

Given: Asp MVC Core Client JavaScript client hosted by ASP MVC Core Asp Web Api All are authenticating with IdentityServer Problem For a normal user the auth is done with asp core and the oidc client. I use the access token in asp core to access…
Boas Enkler
  • 12,264
  • 16
  • 69
  • 143
4
votes
1 answer

Service Fabric Stateless Identity Server 3 service fails under load

We are in the process of migrating a stateless services based on Identity Server 3 (https://github.com/IdentityServer/IdentityServer3) to service fabric. The project runs fine on a local development box and on a production cluster under normal…
David Bown
  • 61
  • 3
4
votes
1 answer

Why ASP.NET Core adds claims twice into User.Claims property?

I have asp.net core application and the application is using OpenIdConnect authentication using IdentityServer3. When the user is authenticated successfully the application receives proper claims from identity server. I can debug the line…
LP13
  • 30,567
  • 53
  • 217
  • 400