IdentityServer4 is an OpenID Connect and OAuth 2.0 framework for ASP.NET Core.
Warning
As of Oct, 1st 2020, we started a new company. All new development will happen in our new organization. The new Duende IdentityServer is free for dev/testing/personal projects and companies or individuals with less than 1M USD gross annual revenue - for all others we have various commercial licenses that also include support and updates. Contact us for more information.
IdentityServer4 will be maintained with security updates until November 2022.
Note
This docs cover the latest version on main branch. This might not be released yet. Use the version picker in the lower left corner to select docs for a specific version.
It enables the following features in your applications:
Authentication as a Service
Centralized login logic and workflow for all of your applications (web, native, mobile, services). IdentityServer is an officially certified implementation of OpenID Connect.
Single Sign-on / Sign-out
Single sign-on (and out) over multiple application types.
Access Control for APIs
Issue access tokens for APIs for various types of clients, e.g. server to server, web applications, SPAs and native/mobile apps.
Federation Gateway
Support for external identity providers like Azure Active Directory, Google, Facebook etc. This shields your applications from the details of how to connect to these external providers.
Focus on Customization
The most important part - many aspects of IdentityServer can be customized to fit your needs. Since IdentityServer is a framework and not a boxed product or a SaaS, you can write code to adapt the system the way it makes sense for your scenarios.
Mature Open Source
IdentityServer uses the permissive Apache 2 license that allows building commercial products on top of it. It is also part of the .NET Foundation which provides governance and legal backing.
Free and Commercial Support
If you need help building or running your identity platform, :ref:`let us know <refSupport>`. There are several ways we can help you out.
.. toctree:: :maxdepth: 3 :hidden: :caption: Introduction intro/big_picture intro/architecture intro/terminology intro/specs intro/packaging intro/support intro/test intro/contributing
.. toctree:: :maxdepth: 3 :hidden: :caption: Quickstarts quickstarts/0_overview quickstarts/1_client_credentials quickstarts/2_interactive_aspnetcore quickstarts/3_aspnetcore_and_apis quickstarts/4_javascript_client quickstarts/5_entityframework quickstarts/6_aspnet_identity
.. toctree:: :maxdepth: 3 :hidden: :caption: Configuration configuration/startup configuration/resources configuration/clients configuration/mvc configuration/apis
.. toctree:: :maxdepth: 3 :hidden: :caption: Topics topics/startup topics/resources topics/clients topics/signin topics/signin_external_providers topics/windows topics/signout topics/signout_external_providers topics/signout_federated topics/federation_gateway topics/consent topics/apis topics/deployment topics/logging topics/events topics/crypto topics/grant_types topics/client_authentication topics/extension_grants topics/resource_owner topics/refresh_tokens topics/reference_tokens topics/persisted_grants topics/pop topics/mtls topics/request_object topics/custom_token_request_validation topics/cors topics/discovery topics/add_apis topics/add_protocols topics/tools
.. toctree:: :maxdepth: 3 :hidden: :caption: Endpoints endpoints/discovery endpoints/authorize endpoints/token endpoints/userinfo endpoints/device_authorization endpoints/introspection endpoints/revocation endpoints/endsession
.. toctree:: :maxdepth: 3 :hidden: :caption: Reference reference/options reference/identity_resource reference/api_scope reference/api_resource reference/client reference/grant_validation_result reference/profileservice reference/interactionservice reference/deviceflow_interactionservice reference/ef reference/aspnet_identity
.. toctree:: :maxdepth: 3 :hidden: :caption: Misc misc/training misc/blogs misc/videos