Blog topic
When ASP.NET Identity is enough, when you need OpenIddict or IdentityServer, and why MapIdentityApi tokens are not JWTs.
Identity choice is a product decision: one app versus SSO, opaque Identity API tokens versus JWT bearer, Duende licensing versus OpenIddict. This hub is for that decision — not for interceptor plumbing. Read MapIdentityApi versus JWT if Angular is sending the wrong string into AddJwtBearer. Read IdentityServer versus Identity when a second app or an external IdP is on the roadmap. Read the IdentityServer4 to OpenIddict checklist only if you are leaving a dead IS4 host — not as a greenfield default.
8 min read
A production checklist for leaving IdentityServer4: what actually moves to OpenIddict, what stays in ASP.NET Identity, and the Angular OIDC breaks I still see on healthcare and SaaS apps.
8 min read
When ASP.NET Identity is enough, when OpenIddict or IdentityServer earns SSO, and how MapIdentityApi fits — without treating IdentityServer4 as a current option.
5 min read
ASP.NET Core Identity’s MapIdentityApi issues opaque access tokens by default — not JWTs. When that is enough, when you still need JWT bearer auth for Angular, and how to stop mixing the two by accident.