Questions tagged [identityserver3]
OpenID Connect Provider and OAuth 2.0 Authorization Server Framework based on Katana.
1,319
questions
0
votes
1
answer
21
views
Identity server 3 Windows authentication not working with current user
In my mvc app integrated with identity server 3 with windows login. When i use that login with windows option its asking credentials popup (I attached screen shot.)
when i close the browser and reopen ...
0
votes
1
answer
87
views
iframe session issue in OIDC client
I'm using OIDC Client and WSO2 API Manager 3.2.0 in my angular application for authentication. Everything works fine until I hit log out.
First, I log into the application from one tab and then ...
0
votes
0
answers
16
views
When authscheme specified in Authorization header identity server giving errror invalid_token
I am using identitysever for authentication. I am getting access_token from identity server which I am passing in request header in Authorization. If I pass token without authscheme it identity server ...
0
votes
0
answers
112
views
How to use cookie authentication for Ocelot apigatway
I am using IdentitySever which issue id_token. Their is another website which uses cookie authentication with openidconnect. Code is as below
public void ConfigureServices(IServiceCollection services)...
2
votes
0
answers
83
views
IdentityServer 3 returns invalid_client when trying to authenticate with Blazor
I have an old IdentityServer 3 implementation and I'm trying not to change it to a newer version, I have been trying to authenticate a Blazor wasm application with it and so far almost everything went ...
0
votes
0
answers
46
views
Use both Windows Authentication and Login forms in Same Identity as a service(IDaaS)
I have two applications (WPF and Angular with asp.net Web API 4.8 ) , I want a SSO (single sign on) authentication for both by automatically federated with on-premises active directory AD and Login ...
0
votes
0
answers
21
views
How to retrieve AD Groups as claim-roles in a ClaimsPrincipal object using IdentityServer
Is there a way of retrieving AD Groups of the logged on user when authenticating via IdentityServer 3 and add custom claim based on a certain AD Group?
I think I need a HttpClient that does a request ...
1
vote
0
answers
16
views
IdentityServer: Clients aren't notified when user logs out, if the application connected to IIS
i have many asp.net core applications that connected to IdentityServer for the authentication. Before i run these application on the IIS every thing worked as it should. Before running on IIS, every ...
0
votes
0
answers
45
views
Auth server returning invalid_client in code only, but works for other clients?
I've been fighting this for over a week now and I'm starting to lose my mind. I have an ASP.NET authentication server running on .NET 4.7.2 and Identity Server 3:
My client is utilizing Identity ...
1
vote
1
answer
46
views
Upgrading SustainSys.Saml2 from v1 to v2 - Set Audience Restriction
Our identity server uses identity server 3 and implements sustainsys.saml2 for SAML integration. We have made an effort to move from v1 to v2 of the SustainSys.Saml2 NuGets. With v1, we explicitly set ...
0
votes
0
answers
30
views
Angular Frontend to authenticate to Microsoft over an IdentityServer3
I am trying to build a Login Page in Angular to authenticate with my Microsoft Account. The fact that IdentityServer4 might be chargeable in the future let me lead to use IdentityServer3. I have ...
1
vote
0
answers
327
views
migration .Net Framework 4.8 to .Net Core 6 - Could not load file or assembly 'System.IdentityModel, Version=4.0.0.0
I just migrated My project from the .net framework 4.8 to the .Net core 6
My Projects have a lot of dependencies like Owin, IdentityServer3, and ...
Finally, my solution builds successfully now, but ...
0
votes
2
answers
101
views
Generating Reference Token Instead of JWT
Please find below the steps I applied in order to generate Reference Token instead of JWT:
In the [Clients] table, I updated property [AccessTokenType] = 1. Please note that this is the client ...
0
votes
0
answers
16
views
How to use IdentityServerServiceFactory with ASP.NET Web API 2
I am using IdentityServer3 with AspnetIdentity for user storage. Identity Server use dependency injection as details here
I have ASP.NET Web API 2 and I want to inject certain services inside the ...
1
vote
0
answers
25
views
Identity Server Resource Owner flow with external Identity Provider
We have a project where the client requests the use of their own Identity Provider, in this case, it is SalesForce.
We secure the application using IdentityServer 3 and have configured it that for ...
0
votes
1
answer
241
views
How to use end client state parameter in IdentityServer 3?
I have configured IdentityServer 3 to use external IdentityProvider which is pointing to AAD.
As of now, when I send a request to IdentityServer, I am properly redirected to the AAD for login, however,...
2
votes
1
answer
124
views
Trouble authorizing .NET 5 Web API reference tokens to IdentityServer3 using IdentityServer4.AccessTokenValidation package
Server
Using IdentityServer3 for client/application authorization.
Using IdentityAdmin to edit clients/scopes via GUI.
Created a new Client for the API, added a SharedSecret and api scope.
API / ...
0
votes
0
answers
27
views
Implicit flow adds hash prefix to the url
I am using identitysever3 and I have defined a callback url in my .cs client as
RedirectUris ={"http://localhost:3000/authorization-code/callback/" }
I am running a node js using passport ...
0
votes
0
answers
33
views
read parameters from identityserver url
I have an identity server in asp.net hosted on IIS server and I have registered a client like this
public static IEnumerable<Client> Get()
{
return new[]{
new Client
...
0
votes
0
answers
63
views
Identity Server 3: How can I get timeout/session expire event?
How can I get timeout/session expire event in Identity Server 3?
I need to create a audit log of log out timing and user id. I am facing problem to get time out or session expire event, while user ...
1
vote
0
answers
108
views
Add in-between endpoint for identity server external identity provider requests
We are using identity server3 for login and some users can login using an external identity provider(eid).
In the case of an external identity provider we provide a redirect URL, so once the user ...
0
votes
2
answers
222
views
protect asp.net web api 2 project with identity server 4
I have an asp.net web api 2 project with .Net framework 4.8 and a centralized Identity Server 4 project. I want to validate jwt/access token generated from IS4 in my web api 2 project. I can ...
0
votes
1
answer
398
views
IdentityServer: Check if scopes present in a policy for authentication in OpenId Connect
There are 2 projects:
1. IdentityServer project
2. Client Project
In my Client Project, I have a controller with policy based authentication:
[ApiController]
[Route("[controller]")]
[...
0
votes
1
answer
168
views
External login (via ADFS) from identity server3 responds with http status code 504
I received federation metadata endpoint from customer which I used to configure WsFederationAuthentication in identityserver3.
Everything works fine from developer machine like identity server login ...
0
votes
1
answer
48
views
How to validate Identityserver4 token validation in webapi?
Have you tried to ID4 connect with web api (.net framework 4.6) I follow below the tutorial but APIResource with secret key is not working. it also not giving any error if I give wrong API resource ...
2
votes
0
answers
64
views
WSO2 IS 5.10 - User Portal application missing in service provider list
My User Portal app is missing when I check the Service Providers:
But when I try to create a new one it tells me that it still exists .
Moreover, the User Portal works fine but I need to make some ...
0
votes
1
answer
85
views
Change password remotely through API for Identity server
I just received an .Net API that uses Identity server for Authentication. I have never used Identity server before. So I'm lost looking for info.
Here is my code for authentication.
[HttpPost]
public ...
0
votes
1
answer
82
views
Could not install IdentityServer3.AccessTokenValidation in .netframework 4.61 API
I have a .NetFramework4.61 WebAPI. I am trying install IdentityServer3.AccessTokenValidation & System.IdentityModel.Tokens.Jwt using Nuget but it is giving me the below error. I also try to ...
0
votes
1
answer
119
views
Looping custom claims on login - Asp.net core
Our ASP.NET MVC application connects to IdentityServer 3 with the following config and able to access all the custom claims
app.UseOpenIdConnectAuthentication(new OpenIdConnectAuthenticationOptions
...
0
votes
1
answer
713
views
Postman Bad Request - Request Too Long
I am using Asp.Net Core 3.1 API with Identity Server and I am using Postman as an API tester from long time and it is working perfect, but, after version update to 8.+.+ the Postman return me this ...
1
vote
0
answers
180
views
Invalid HTTP request for token endpoint - IdentityServer4 ASP.Net Core 5.0
The connect/token is working good by using swagger, but when I'm trying to use it in postman, an error is showing
{
"error": "invalid_request"
}
The Status code: 400 Bad Request.
...
-1
votes
2
answers
377
views
How to authenticate using Azure AD token using identity server 3 and microsoft teams app
We use custom idp (identity server 3) to authenticate users on the system. Now I have a requirement to implement Azure AD authentication. I tried adding Azure AD as an external provider it is working ...
0
votes
1
answer
1k
views
Keep getting session out with OIDC JS client and Identity server 4 Authorization flow with PKCE flow on Azure app services
Using Identity server 4 with OIDC JS client in every 10 seconds the application reloads, in the network tabs I can see
The end session URL is always been canceled and application reload frequently
...
-1
votes
1
answer
31
views
Correlate Failed error when moved from .NET Core 2.2 to NET 5
I am using IdentityServer3 for OpenIDConnect authentication. I have ASP.NET Core 2.2 client application that is using the following code in startup.cs for authentication and it has been working fine.
...
0
votes
1
answer
36
views
IdentityServer3 with Windows Authentication fails with redirect to IdpReplyUrl
I am trying to implement IdentityServer using Windows Authentication in an ASP.NET OWIN application.
I have used the WebHost (WindowsAuth) code at https://github.com/IdentityServer/IdentityServer3....
0
votes
1
answer
267
views
How to use primary domain for Openid authentication in Identity Server 4?
xyz.com
yzx.com
zxy.com
I have these domains and running identity server 4 application with AuthO Openid connections. My primary domain is xyz.com, so if user login by using another domain like yzx....
1
vote
1
answer
896
views
Protect ASP.NET WebAPI in .NET 4.7.X with IdentityServer 4 Jwt
So, I have set up IdentityServer 4 in a .NET Core 3.1 project. And I have Web application, also .NET Core 3.1 signing in users through OpenId Connect (oidc). Works perfectly.
But I also have another ...
0
votes
1
answer
234
views
Trust multiple instances of IdentityServer
We are trying to integrate with another department, each of us have an instance of IdentityServer.
They want to consume our APIs via access_tokens generated from their instance of IdentityServer.
(Our ...
0
votes
1
answer
94
views
Problem on CORS configuration with Web Api 2, OWIN and Identity Server
I have a few web applications under the same domain, all using a stand alone Identity Server 3 app for login purposes. Under test environment, every single one of then are under the same domain (http:/...
1
vote
0
answers
383
views
IdentityServer different Tenants/Users across browser tabs
We're using IdentityServer for authentication in our SaaS product, which has many tenants, and our users may have access to multiple tenants. We use oidc-client from a VueJs front-end to auth with ...
0
votes
1
answer
142
views
Identity Server 3 - invalid_grant - Refresh token already used
In our application, we periodically encounter a scenario where the user requests a new token at the same time when we're automatically refreshing the token in the background (via JS.)
Both requests ...
0
votes
1
answer
138
views
OAuth 2.0 Client Identity for Mobile Native App and pure JS client
I was reseating OAuth docs and understand that https://auth0.com/docs/flows/authorization-code-flow-with-proof-key-for-code-exchange-pkce is better than Authorization Code Flow, because it gives less ...
0
votes
1
answer
1k
views
Building Custom Authentication Method for ADFS 2019 (v4)
I am having trouble creating a custom authenticator for ADFS v4 on Windows Server 2019. My goal is to create a custom primary authenticator but right now I'd settle for getting a custom authenticator ...
0
votes
1
answer
1k
views
IdentityServer4 API unauthorized to call introspection endpoint
I'm trying to setup and IdentiyServer4, but I am stuck at the authorize:calling the /connect/introspect endpoint gives me the error
IdentityServer4.Validation.ApiSecretValidator: Error: No API ...
1
vote
1
answer
753
views
sending endsession request to identityserver throws error
I have a ASP.NET MVC application with framework 4.7.2. The application is configured to use IdentityServer3 using OpenIDConnect. When user clicks on Logout button the following code is invoked
Action ...
0
votes
1
answer
482
views
How to overwrite post logout redirect url
I am using IdentityServer3 and i have ASP.NET Core as Client application.
Here is my LoggOff action method
[HttpPost]
public async Task LogOff()
{
await Microsoft.AspNetCore....
1
vote
1
answer
2k
views
How to logout ClaimsIdentity User when using OpenIDConnect
I have ASP.NET Core application that is using OpenIDConnect authentication. In OnTokenValidated event i check if Authenticated user exists in the my application's database, and if not then i am ...
1
vote
2
answers
1k
views
How do I Add End User Self Registration to IdentityServer?
I think I finally understand OAuth/OIDC/IdentityServer/IdMgr/IUA/ASP.NET Identity well enough to recognize the answer to my question.
Can anyone point me at a full-featured end-user self-registration ...
1
vote
2
answers
481
views
Identity Server 3 is not persisting authentication cookie
I am using IdenttyServer3. I have 3 client applications. 2 applications are developed in .NET Core and 1 is in full .NET.
On login screen if user checked remember me option, then user does not have to ...
0
votes
0
answers
196
views
Generate different access token scopes from 1 refresh token
Is there a way to generate from 1 refresh token several access tokens, each having different scope? As far as is found in my research that using 1 refreh token once we downgrade the scope of an access ...