Blog posts

Team posts

2020

• Flexible Access Token Validation in ASP.NET Core

• Resource Access in IdentityServer8 v4 and going forward

• Automatic Token Management for ASP.NET Core and Worker Services 1.0

• Mutual TLS and Proof-of-Possession Tokens: Summary

• Mutual TLS and Proof-of-Possession Access Tokens – Part 1: Setup

• Hardening OpenID Connect/OAuth Authorize Requests (and Responses)

• Hardening Refresh Tokens

• OAuth 2.0: The long Road to Proof-of-Possession Access Tokens

• Outsourcing IdentityServer8 Token Signing to Azure Key Vault

• Using ECDSA in IdentityServer8

2019

• Scope and claims design in IdentityServer

• Try Device Flow with IdentityServer8

• The State of the Implicit Flow in OAuth2

• An alternative way to secure SPAs (with ASP.NET Core, OpenID Connect, OAuth 2.0 and ProxyKit)

• Automatic OAuth 2.0 Token Management in ASP.NET Core

• Encrypting Identity Tokens in IdentityServer8

2018

• IdentityServer8 Update

• IdentityServer and Swagger

• Removing Shared Secrets for OAuth Client Authentication

• Creating Your Own IdentityServer8 Storage Library

2017

• Platforms where you can run IdentityServer8

• Optimizing Tokens for size

• Identity vs Permissions

• Bootstraping OpenID Connect: Discovery

• Extending IdentityServer8 with WS-Federation Support

• Announcing IdentityServer8 RC1

• Getting Started with IdentityServer 4

• IdentityServer 4 SharePoint Integration using WS-Federation

Community posts

• Blazor WebAssembly authentication and authorization with IdentityServer8

• Additional API Endpoints to IdentityServer 4

• Securing Hangfire Dashboard using an OpenID Connect server (IdentityServer 4)

• OAuth 2.0 - OpenID Connect & IdentityServer

• Running IdentityServer8 in a Docker Container

• Connecting Zendesk and IdentityServer 4 SAML 2.0 Identity Provider

• IdentityServer localization using ui_locales

• Self-issuing an IdentityServer8 token in an IdentityServer8 service

• IdentityServer8 on the ASP.NET Team Blog

• Angular2 OpenID Connect Implicit Flow with IdentityServer8

• Full Server Logout with IdentityServer8 and OpenID Connect Implicit Flow

• IdentityServer8, ASP.NET Identity, Web API and Angular in a single Project

• Secure your .NETCore web applications using IdentityServer 4

• ASP.NET Core IdentityServer8 Resource Owner Password Flow with custom UserRepository

• Secure ASP.NET Core MVC with Angular using IdentityServer8 OpenID Connect Hybrid Flow

• Adding an external Microsoft login to IdentityServer8

• Implementing Two-factor authentication with IdentityServer8 and Twilio

• Security Experiments with gRPC and ASP.NET Core 3.0

• ASP.NET Core OAuth Device Flow Client with IdentityServer8

• Securing a Vue.js app using OpenID Connect Code Flow with PKCE and IdentityServer8

• Using an OData Client with an ASP.NET Core API

• OpenID Connect back-channel logout using Azure Redis Cache and IdentityServer8

• Single Sign Out in IdentityServer8 with Back Channel Logout