Questions tagged [thinktecture-ident-server]

Thinktecture IdentityServer is an open source security token service based on Microsoft technologies designed around Claims Based Authentication and Windows Identity Foundation.

Thinktecture IdentityServer is an open source security token service based on Microsoft technologies designed around Claims Based Authentication and Windows Identity Foundation.

Version 2: https://github.com/IdentityServer/IdentityServer2/

Version 3: https://github.com/IdentityServer/IdentityServer3/

337 questions
8
votes
5 answers

Thinktecture Identity server v3 Google provider

I am getting issue while integration external provider i.e Google with Thinktecture identity server v3 .I am getting following error: "The client application is not known or is not authorized." Do any one have any idea about this error.
user1918328
  • 101
  • 2
  • 3
7
votes
1 answer

Identity Server 3 refresh token expires before its expiration period set in the client configuration

I am using Authorization Code flow for one of my Identity Server 3 clients and it is configured as follows: ClientId = "tripgalleryauthcode", ClientName = "Trip Gallery", Flow = Flows.AuthorizationCode, AllowAccessToAllScopes = true, RequireConsent…
7
votes
2 answers

Azure AD federated logout not redirecting to client application

I am using Identity Server 3 for a central authentication server to a .Net MVC web application I am building. I have configured the authentication server to use the Open ID Connect identity provider in order to allow users to authenticate against a…
Steve
  • 9,335
  • 10
  • 49
  • 81
7
votes
0 answers

IdentityServer3 symmetric key issue on Relying Party

I just set up a SelfHost(InMem with WS-Fed) Thinktecture IdentityServer3 project example and I'm trying to use it to get a JWT, the problem is that I only recieve tokens signed with an asymmetric key using the alg RS256 but I need them to be…
7
votes
1 answer

Injecting user registration steps into IdentityServer3 SSO process

I'm looking to employ Thinktecture's IdentityServer3 solution as a SSO service across multiple web application the organisation makes available to external users. Taking the MVC Authentication sample as a starting point I'm looking at bolting on a…
Gavin
  • 5,629
  • 7
  • 44
  • 86
7
votes
1 answer

thinktecture identityserver v3

Trying to use Thinctecture identityserver v3 as a simple sts for multiple mvc applications. I'm able to walk through the sample applications provided and the run fine but they all use embedded identityserver. I need the identityserver to be a…
7
votes
1 answer

AngularJS Access Token Security Concerns

What is the best practice for storing an access token in AngularJS after it is retrieved from an authorization server? I have seen many suggestions to use the localStorage service, but then I have read other posts/blogs that say to never use…
user3410575
  • 417
  • 3
  • 11
7
votes
1 answer

WIF sliding session re-authenticate

I've implemented sliding sessions in my Relying Party application, as described in Sliding Sessions for WIF 4.5. That works great as far as it goes, but there's one problem that it seems nobody talks about. As the linked blog post points out, when…
Jim Mischel
  • 131,090
  • 20
  • 188
  • 351
6
votes
1 answer

How do I use Windows auth with Identity Server 3?

My goal is a Angular app that consumes a web service, with users of the app/web service authenticated using Windows auth. Users should be able to log into a machine on our Windows domain, open a browser and use the Angular app without logging in…
6
votes
2 answers

How to consume JWT access token and user claims using RestSharp

I'm using below code to consume JWT access token from an Asp.net Web Api 2.2 service. I have followed this article to setup an authorization server in Web Api service. I'm using RestSharp in the client. client code: var client = new…
Rahul
  • 2,431
  • 3
  • 35
  • 77
6
votes
2 answers

Thinktecture Identity Server v3 How to keep Claims from external providers?

I'm trying to follow the simple guide mvcGettingStarted. Now, I've implemented both GoogleAuthentication and FacebookAuthentication providers, and everything is working as expected, I actually can log-in, and if I sign in with my identity server I…
Daniele
  • 1,063
  • 1
  • 10
  • 22
6
votes
1 answer

IdP initiated login with ThinkTecture IdentityServer v3

Summary In SAML there is a concept of IdP-inititated login, meaning that the Identifying Party (IdP) can send an unsolicited token to the Relying Party (RP / the consuming application) and the user can be logged in without ever calling out to the…
6
votes
2 answers

AngularJs ASP.NET WebApi Authentication with Thinktecture

I´m trying to make an AngularJs web that sends login and password to an ASP.NET WebApi backend and login this user with Thinktecture. I have Thinktecture working fine with other project, ASP.NET MVC, using WS-Federation. Now I´m trying to do…
6
votes
1 answer

Single-sign-on: Which direction should I go?

I have a SaaS web application that caters to multiple education institutions. All clients are hosted in the same application/database. The application is currently written in C# for ASP.Net 4 Web Forms. Currently my application uses a local/native…
6
votes
1 answer

Posting a SAML token to ASP.NET MVC website

I have a claims aware MVC website setup using the Thinktecture Identity Server. I now have a requirement to allow a 3rd party to access certain parts of the website. Is it possible to programmatically authenticate with the Identity Server and post…
KevB
  • 3,570
  • 1
  • 26
  • 29
1
2
3
22 23