IdentityServer4: New & Improved for ASP.NET Core
summary
Rewrites IdentityServer for ASP.NET Core, removing old Katana plumbing and reusing ASP.NET Core logging and DI, adds signing credential APIs (including a temporary signing credential), splits scopes into IdentityResource and ApiResource, and introduces a separate QuickStart UI with test users for development. Supports public clients without secrets, multiple grant types with validation, external providers (Google) and IIS Windows auth integration. Migration demos show existing clients and APIs keep working on the same protocol and cross-version compatibility tests pass.
AI-written summary · about
chapters (18)
- 0:00Introduction to IdentityServer
- 2:35Transitioning to .NET Core
- 5:04What's new in version 4
- 6:45Migration scenario overview
- 8:07Demonstrating the old setup
- 10:20IdentityServer 3 architecture
- 13:54Configuring IdentityServer 4
- 17:38Modeling resources
- 22:38Configuring client applications
- 26:08Verification of configuration
- 29:31Improved client options
- 32:03MVC client configuration
- 34:38Defining identity resources
- 37:13Implementing the user UI
- 43:33User storage in version 4
- 46:44Adding external authentication
- 51:57Windows authentication support
- 56:17Questions and answers
related talks
58mIdentityServer4: New & Improved for ASP.NET Core
55mIdentityServer for ASP.NET Core 2
01h 03mIdentity Server 4 with Angular and ASP.NET Core
54mSecuring Web Applications and APIs with ASP.NET Core 2.2 and 3.0
51mAuthentication and Authorization in ASP.NET Core 2
01h 01mSecuring Web Applications and APIs with ASP.NET Core 2.2 and 3.0
59mBuilding APIs for developers with Identity Server 4
58mSecurity in ASP.NET Core 2.0