Duende IdentityServer

The most flexible and standards-compliant OpenID Connect and OAuth 2.x framework for ASP.NET Core.

Welcome to the official GitHub repository for Duende IdentityServer!

Overview

Duende IdentityServer is a highly extensible, standards-compliant framework for implementing the OpenID Connect and OAuth 2.x protocols in ASP.NET Core. It offers deep flexibility for handling authentication, authorization, and token issuance and can be adapted to fit complex custom security scenarios.

Extensibility Points

• Customizable User Experience: Go beyond simple branding to fully customizable user interfaces.
• Core Engine Customization: The engine itself is modular and built from services that can be extended or overridden.

Advanced Security Scenarios

Duende IdentityServer supports a wide range of security scenarios for modern applications:

• Federation: Easily integrate with external identity providers or other authentication services using federation.
• Token Exchange: Enable secure token exchange between clients and services with Token Exchange.
• Audience Constrained Tokens: Restrict tokens to specific audiences, increasing security in multi-service architectures. Learn more about audience-constrained tokens.
• Sender Constrained Tokens: Implement Proof of Possession (PoP) tokens with DPoP or mTLS, which bind tokens to the client, adding another layer of protection.
• Pushed Authorization Requests (PAR): Support Pushed Authorization Requests to enhance the security of the authorization flow.