Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

IdentityServer 4 with Active Directory on Premise

Our client have many applications and they want to integrate it to just log once (single sign on), but they want that using active directory on premise they have their own server.

We decided to evaluate identityserver so we found this http://docs.identityserver.io/en/latest/topics/windows.html that identitserver 4 support active directory but here we dont see where we are going to put the LPAD//... route to connect to the active directory... so we are with doubts if identityserver supports or not Active directory or Maybe we cant undertand it very well. Thank you.

like image 970
eflorespalma Avatar asked Sep 04 '17 18:09

eflorespalma


People also ask

Is Identity Server 4 still free?

About IdentityServer4 IdentityServer is a free, open source OpenID Connect and OAuth 2.0 framework for ASP.NET Core.

Is IdentityServer4 obsolete?

IdentityServer4 support will last until the end of life of . NET Core 3.1 that means till November 2022. In that way, Duende provides new documentation for the fifth service version.

Do I need IdentityServer4?

Why do we need IdentityServer4? ASP.NET Identity can receive a security token from a third-party login provider like Facebook, Google, Microsoft and Twitter. But If you want to issue a security token for a local ASP.NET Identity user you need to work with a third-party library like IdentityServer4, OpenIddict.

Why do I need IdentityServer?

It's designed to provide a common way to authenticate requests to all of your applications, whether they're web, native, mobile, or API endpoints. IdentityServer can be used to implement Single Sign-On (SSO) for multiple applications and application types.


1 Answers

IdentityServer supports multiple ways to authenticate Windows users

  • Windows integrated authentication if the machine running IS is domain joined (as the documentation describes)
  • Username/password login page via LDAP (manual code from the account controller)
  • via federation (e.g. with OpenID Connect/ADFS or a domain joined IdentityServer)
like image 98
leastprivilege Avatar answered Sep 24 '22 16:09

leastprivilege