The most flexible and standards-compliant OpenID Connect and OAuth 2.0 framework for ASP.NET Core. IdentityServer gives you full control over your UI, UX, business logic, and data. In IdentityServer, customizing your workflows is not an afterthought. Our APIs and extensibility points allow adapting to your workflows and business rules without having to find complicated workarounds. You can choose whichever UI framework or technology suits you best to integrate with our token engine. We believe that C# is the best DSL, don't bother with trying to express your logic in YAML, XML, or other "languages". In short, if what you want to achieve is doable in .NET Core, it is doable with IdentityServer. You are not forced onto a specific hosting environment or other peoples' servers, you are not forced to use a specific database or geographical region.
Features
- Easily integrate with external identity providers or other authentication services using federation
- Enable secure token exchange between clients and services with Token Exchange
- Restrict tokens to specific audiences, increasing security in multi-service architectures
- Implement Proof of Possession (PoP) tokens with DPoP or mTLS, which bind tokens to the client, adding another layer of protection
- Documentation available
- Support Pushed Authorization Requests to enhance the security of the authorization flow
Project Samples
