Open.IdentityServer Toggle Menu

Documentation

Introduction

The Big Picture
Terminology
Supported Specifications
- OpenID Connect
- OAuth 2.0
Packaging and Builds
- Open.IdentityServer main repo
- Templates
Support and Consulting Options
- Free support
- Commercial support
Contributing

Quickstarts

Overview
- Preparation
Protecting an API using Client Credentials
Interactive Applications with ASP.NET Core
ASP.NET Core and API access
Adding a JavaScript client
Using Entity Framework Core for configuration and operational data
Using ASP.NET Identity

Migrating

IdentityServer4 to Open.IdentityServer
Duende.IdentityServer to Open.IdentityServer

Topics

Startup
Compatibility
- Keys Compatibility Store
Defining Resources
- Identity Resources
- APIs
Defining Clients
Sign-in
Sign-in with External Identity Providers
Windows Authentication
- On Windows using IIS hosting
Sign-out
Sign-out of External Identity Providers
Federated Sign-out
Federation Gateway
- Implementation
Consent
Protecting APIs
- Validating reference tokens
- Supporting both JWTs and reference tokens
Deployment
Logging
- Setup for Serilog
Events
Cryptography, Keys and HTTPS
Grant Types
Client Authentication
Extension Grants
- Example: Simple delegation using an extension grant
Resource Owner Password Validation
Refresh Tokens
Reference Tokens
Persisted Grants
Using Resource Indicators
Proof-of-Possession Access Tokens
Mutual TLS
Authorize Request Objects
- Passing request JWTs by reference
- Accessing the request object data
Custom Token Request Validation and Issuance
CORS
Discovery
- Extending discovery
Adding more API Endpoints
Adding new Protocols
- Typical authentication workflow
- Useful Open.IdentityServer services
Tools

Endpoints

Discovery Endpoint
Authorize Endpoint
Token Endpoint
- Example
UserInfo Endpoint
- Example
Device Authorization Endpoint
- Example
Introspection Endpoint
- Example
Revocation Endpoint
- Example
End Session Endpoint
- Parameters
- Example

Reference

IdentityServer Options
Identity Resource
API Scope
- Defining API scope in appsettings.json
- Unused Compatibility Properties
API Resource
- Defining API resources in appsettings.json
Client
GrantValidationResult
Profile Service
IdentityServer Interaction Service
Device Flow Interaction Service
Entity Framework Support
ASP.NET Identity Support
Internalised IdentityModel Resources
- Internalised Content from IdentityModel package
- Recommendations for Client Side

Misc

Articles
Videos

Documentation

Articles

Documentation

Introduction

The Big Picture
Terminology
Supported Specifications
Packaging and Builds
Support and Consulting Options
Contributing

Quickstarts

Overview
Protecting an API using Client Credentials
Interactive Applications with ASP.NET Core
ASP.NET Core and API access
Adding a JavaScript client
Using Entity Framework Core for configuration and operational data
Using ASP.NET Identity

Migrating

IdentityServer4 to Open.IdentityServer
Duende.IdentityServer to Open.IdentityServer

Topics

Endpoints

Discovery Endpoint
Authorize Endpoint
Token Endpoint
UserInfo Endpoint
Device Authorization Endpoint
Introspection Endpoint
Revocation Endpoint
End Session Endpoint

Reference

IdentityServer Options
Identity Resource
API Scope
API Resource
Client
GrantValidationResult
Profile Service
IdentityServer Interaction Service
Device Flow Interaction Service
Entity Framework Support
ASP.NET Identity Support
Internalised IdentityModel Resources

Misc

Articles
Videos

Articles

Articles

Visit IdentityServer.com/articles for a collection of articles about IdentityServer and all things identity related.

Previous Next

Copyright 2020, Brock Allen & Dominick Baier. Copyright in modifications 2026, Rock Solid Knowledge.•v1.0.0 Last updated Monday 1 June 2026