Questions tagged [identityserver3]
OpenID Connect Provider and OAuth 2.0 Authorization Server Framework based on Katana.
1,319
questions
0
votes
0
answers
20
views
Cookies are removed on page refresh (AngularJS)
I am working in Application and in that Application we are using SSO (Single Sign On) and Application stores cookies for Identity Server and that cookies are responsible to various task like "...
0
votes
0
answers
15
views
identity server auto-logout when user idle - not working
I am using identity server 3. Currently, timeout is working based on setup, But I need the solution for when user idle timeout should happen.
AuthenticationOptions = new AuthenticationOptions
...
0
votes
0
answers
16
views
Im getting an error on Google Login on Identity server
i have implemented the google login on my Identity Server 3, however, after the login process, im getting this error:
[Error after logging][1]
[1]: https://i.stack.imgur.com/RctcW.png
My client id and ...
0
votes
0
answers
20
views
PostAuthenticateAsync in Duende IdentityServer6
We have a project that is using IDP version 3. We are trying to upgrade it to Duende IDP6. There are some services missing in IDP6.
e.g.:
IUserService
ITokenService
ILocalization
We do have some class ...
0
votes
0
answers
32
views
IdentityServer3 dependency conflict with Okta's SDK
I have a solution that I was tasked to update from .NET Framework 4.6 to 4.8 (can't go any higher than that). We also need to add Okta as an auth method.
The solution has with multiple projects and it ...
0
votes
1
answer
186
views
Can Duende IdentityServer v6 be used in a .Net Framework Application?
We are reviewing our our applications which use IdentityServer now it has rebranded to Duende become a subscription model and have come across a forgotten application which consists of a number of ....
0
votes
1
answer
160
views
Identity Server - Multiple users with different access levels on different accounts
My application is composed of an API layer which is accessable by presenting a Bearer Token, obtained from our Identity Server. Each of our API has a level of scopes that the token must contain in ...
0
votes
1
answer
341
views
Connecting .net 6 application with Identity Server 3
We have Identity Server 3 configured for our organization.
I am creating an application in .Net6 and want to connect and show the login page from Identity Server 3. But it seems like there are fair ...
1
vote
0
answers
191
views
How to migrate from IdentityServer3 to Duende IdentityServer6?
I have an IdentityServer3 used by multiple applications. The clients, scopes, flows, urls etc., of the IdentityServer3 are persisted in an MS SQL Server. I want to upgrade the IdentityServer3 to ...
0
votes
1
answer
161
views
Identity server 3 Windows authentication not working with current user
In my mvc app integrated with identity server 3 with windows login. When i use that login with windows option its asking credentials popup (I attached screen shot.)
when i close the browser and reopen ...
0
votes
2
answers
1k
views
iframe session issue in OIDC client
I'm using OIDC Client and WSO2 API Manager 3.2.0 in my angular application for authentication. Everything works fine until I hit log out.
First, I log into the application from one tab and then ...
3
votes
1
answer
315
views
IdentityServer 3 returns invalid_client when trying to authenticate with Blazor
I have an old IdentityServer 3 implementation and I'm trying not to change it to a newer version, I have been trying to authenticate a Blazor wasm application with it and so far almost everything went ...
3
votes
0
answers
175
views
Use both Windows Authentication and Login forms in Same Identity as a service(IDaaS)
I have two applications (WPF and Angular with asp.net Web API 4.8 ) , I want a SSO (single sign on) authentication for both by automatically federated with on-premises active directory AD and Login ...
1
vote
0
answers
68
views
IdentityServer: Clients aren't notified when user logs out, if the application connected to IIS
i have many asp.net core applications that connected to IdentityServer for the authentication. Before i run these application on the IIS every thing worked as it should. Before running on IIS, every ...
0
votes
0
answers
175
views
Auth server returning invalid_client in code only, but works for other clients?
I've been fighting this for over a week now and I'm starting to lose my mind. I have an ASP.NET authentication server running on .NET 4.7.2 and Identity Server 3:
My client is utilizing Identity ...
1
vote
1
answer
162
views
Upgrading SustainSys.Saml2 from v1 to v2 - Set Audience Restriction
Our identity server uses identity server 3 and implements sustainsys.saml2 for SAML integration. We have made an effort to move from v1 to v2 of the SustainSys.Saml2 NuGets. With v1, we explicitly set ...
1
vote
0
answers
882
views
migration .Net Framework 4.8 to .Net Core 6 - Could not load file or assembly 'System.IdentityModel, Version=4.0.0.0
I just migrated My project from the .net framework 4.8 to the .Net core 6
My Projects have a lot of dependencies like Owin, IdentityServer3, and ...
Finally, my solution builds successfully now, but ...
0
votes
2
answers
263
views
Generating Reference Token Instead of JWT
Please find below the steps I applied in order to generate Reference Token instead of JWT:
In the [Clients] table, I updated property [AccessTokenType] = 1. Please note that this is the client ...
2
votes
0
answers
53
views
Identity Server Resource Owner flow with external Identity Provider
We have a project where the client requests the use of their own Identity Provider, in this case, it is SalesForce.
We secure the application using IdentityServer 3 and have configured it that for ...
1
vote
1
answer
721
views
How to use end client state parameter in IdentityServer 3?
I have configured IdentityServer 3 to use external IdentityProvider which is pointing to AAD.
As of now, when I send a request to IdentityServer, I am properly redirected to the AAD for login, however,...
2
votes
1
answer
343
views
Trouble authorizing .NET 5 Web API reference tokens to IdentityServer3 using IdentityServer4.AccessTokenValidation package
Server
Using IdentityServer3 for client/application authorization.
Using IdentityAdmin to edit clients/scopes via GUI.
Created a new Client for the API, added a SharedSecret and api scope.
API / ...
1
vote
0
answers
150
views
Add in-between endpoint for identity server external identity provider requests
We are using identity server3 for login and some users can login using an external identity provider(eid).
In the case of an external identity provider we provide a redirect URL, so once the user ...
0
votes
2
answers
355
views
protect asp.net web api 2 project with identity server 4
I have an asp.net web api 2 project with .Net framework 4.8 and a centralized Identity Server 4 project. I want to validate jwt/access token generated from IS4 in my web api 2 project. I can ...
0
votes
1
answer
2k
views
IdentityServer: Check if scopes present in a policy for authentication in OpenId Connect
There are 2 projects:
1. IdentityServer project
2. Client Project
In my Client Project, I have a controller with policy based authentication:
[ApiController]
[Route("[controller]")]
[...
0
votes
1
answer
398
views
External login (via ADFS) from identity server3 responds with http status code 504
I received federation metadata endpoint from customer which I used to configure WsFederationAuthentication in identityserver3.
Everything works fine from developer machine like identity server login ...
0
votes
1
answer
128
views
How to validate Identityserver4 token validation in webapi?
Have you tried to ID4 connect with web api (.net framework 4.6) I follow below the tutorial but APIResource with secret key is not working. it also not giving any error if I give wrong API resource ...
2
votes
0
answers
118
views
WSO2 IS 5.10 - User Portal application missing in service provider list
My User Portal app is missing when I check the Service Providers:
But when I try to create a new one it tells me that it still exists .
Moreover, the User Portal works fine but I need to make some ...
0
votes
1
answer
231
views
Change password remotely through API for Identity server
I just received an .Net API that uses Identity server for Authentication. I have never used Identity server before. So I'm lost looking for info.
Here is my code for authentication.
[HttpPost]
public ...
0
votes
1
answer
185
views
Could not install IdentityServer3.AccessTokenValidation in .netframework 4.61 API
I have a .NetFramework4.61 WebAPI. I am trying install IdentityServer3.AccessTokenValidation & System.IdentityModel.Tokens.Jwt using Nuget but it is giving me the below error. I also try to ...
0
votes
1
answer
370
views
Looping custom claims on login - Asp.net core
Our ASP.NET MVC application connects to IdentityServer 3 with the following config and able to access all the custom claims
app.UseOpenIdConnectAuthentication(new OpenIdConnectAuthenticationOptions
...
0
votes
1
answer
2k
views
Postman Bad Request - Request Too Long
I am using Asp.Net Core 3.1 API with Identity Server and I am using Postman as an API tester from long time and it is working perfect, but, after version update to 8.+.+ the Postman return me this ...
1
vote
0
answers
453
views
Invalid HTTP request for token endpoint - IdentityServer4 ASP.Net Core 5.0
The connect/token is working good by using swagger, but when I'm trying to use it in postman, an error is showing
{
"error": "invalid_request"
}
The Status code: 400 Bad Request.
...
-1
votes
2
answers
682
views
How to authenticate using Azure AD token using identity server 3 and microsoft teams app
We use custom idp (identity server 3) to authenticate users on the system. Now I have a requirement to implement Azure AD authentication. I tried adding Azure AD as an external provider it is working ...
0
votes
1
answer
2k
views
Keep getting session out with OIDC JS client and Identity server 4 Authorization flow with PKCE flow on Azure app services
Using Identity server 4 with OIDC JS client in every 10 seconds the application reloads, in the network tabs I can see
The end session URL is always been canceled and application reload frequently
...
-1
votes
1
answer
35
views
Correlate Failed error when moved from .NET Core 2.2 to NET 5
I am using IdentityServer3 for OpenIDConnect authentication. I have ASP.NET Core 2.2 client application that is using the following code in startup.cs for authentication and it has been working fine.
...
0
votes
1
answer
104
views
IdentityServer3 with Windows Authentication fails with redirect to IdpReplyUrl
I am trying to implement IdentityServer using Windows Authentication in an ASP.NET OWIN application.
I have used the WebHost (WindowsAuth) code at https://github.com/IdentityServer/IdentityServer3....
0
votes
1
answer
591
views
How to use primary domain for Openid authentication in Identity Server 4?
xyz.com
yzx.com
zxy.com
I have these domains and running identity server 4 application with AuthO Openid connections. My primary domain is xyz.com, so if user login by using another domain like yzx....
1
vote
1
answer
1k
views
Protect ASP.NET WebAPI in .NET 4.7.X with IdentityServer 4 Jwt
So, I have set up IdentityServer 4 in a .NET Core 3.1 project. And I have Web application, also .NET Core 3.1 signing in users through OpenId Connect (oidc). Works perfectly.
But I also have another ...
0
votes
1
answer
323
views
Trust multiple instances of IdentityServer
We are trying to integrate with another department, each of us have an instance of IdentityServer.
They want to consume our APIs via access_tokens generated from their instance of IdentityServer.
(Our ...
0
votes
1
answer
160
views
Problem on CORS configuration with Web Api 2, OWIN and Identity Server
I have a few web applications under the same domain, all using a stand alone Identity Server 3 app for login purposes. Under test environment, every single one of then are under the same domain (http:/...
1
vote
0
answers
527
views
IdentityServer different Tenants/Users across browser tabs
We're using IdentityServer for authentication in our SaaS product, which has many tenants, and our users may have access to multiple tenants. We use oidc-client from a VueJs front-end to auth with ...
0
votes
1
answer
298
views
Identity Server 3 - invalid_grant - Refresh token already used
In our application, we periodically encounter a scenario where the user requests a new token at the same time when we're automatically refreshing the token in the background (via JS.)
Both requests ...
0
votes
1
answer
237
views
OAuth 2.0 Client Identity for Mobile Native App and pure JS client
I was reseating OAuth docs and understand that https://auth0.com/docs/flows/authorization-code-flow-with-proof-key-for-code-exchange-pkce is better than Authorization Code Flow, because it gives less ...
0
votes
1
answer
2k
views
Building Custom Authentication Method for ADFS 2019 (v4)
I am having trouble creating a custom authenticator for ADFS v4 on Windows Server 2019. My goal is to create a custom primary authenticator but right now I'd settle for getting a custom authenticator ...
0
votes
1
answer
3k
views
IdentityServer4 API unauthorized to call introspection endpoint
I'm trying to setup and IdentiyServer4, but I am stuck at the authorize:calling the /connect/introspect endpoint gives me the error
IdentityServer4.Validation.ApiSecretValidator: Error: No API ...
1
vote
1
answer
1k
views
sending endsession request to identityserver throws error
I have a ASP.NET MVC application with framework 4.7.2. The application is configured to use IdentityServer3 using OpenIDConnect. When user clicks on Logout button the following code is invoked
Action ...
1
vote
1
answer
832
views
How to overwrite post logout redirect url
I am using IdentityServer3 and i have ASP.NET Core as Client application.
Here is my LoggOff action method
[HttpPost]
public async Task LogOff()
{
await Microsoft.AspNetCore....
1
vote
1
answer
3k
views
How to logout ClaimsIdentity User when using OpenIDConnect
I have ASP.NET Core application that is using OpenIDConnect authentication. In OnTokenValidated event i check if Authenticated user exists in the my application's database, and if not then i am ...
2
votes
2
answers
2k
views
How do I Add End User Self Registration to IdentityServer?
I think I finally understand OAuth/OIDC/IdentityServer/IdMgr/IUA/ASP.NET Identity well enough to recognize the answer to my question.
Can anyone point me at a full-featured end-user self-registration ...
1
vote
1
answer
781
views
Identity Server 3 is not persisting authentication cookie
I am using IdenttyServer3. I have 3 client applications. 2 applications are developed in .NET Core and 1 is in full .NET.
On login screen if user checked remember me option, then user does not have to ...