Updated Published 10 min read
What is an identity server in ASP.NET Core?
What is an identity server in ASP.NET Core? When Identity plus JWT is enough, and when OpenIddict or Duende is the SSO answer.
Blog topic
Article index for IdentityServer, OpenIddict, ASP.NET Identity, and MapIdentityApi — product choice and migration links.
Identity product choice and migration live on the articles below — not interceptor plumbing (see the authentication hub for JWT/SPA).
This page is the article map for identity product choice and migration — not JWT interceptor plumbing (see the authentication hub).
| You want… | Open |
|---|---|
| IdentityServer vs ASP.NET Identity | What is an identity server? |
| Redirect URI / login loops | Redirect URI mismatch |
| IS4 → OpenIddict | Migration checklist |
| MapIdentityApi opaque vs JWT | MapIdentityApi vs JWT |
| Piece | Role |
|---|---|
| ASP.NET Core Identity | Users/passwords/roles in your database |
| IdentityServer / OpenIddict | Issues tokens; SSO across clients |
| Resource API | Validates JWT; does not own the login UI |
Related: Auth & Tokens
Product choice write-up: What is an identity server in ASP.NET Core?.
Updated Published 10 min read
What is an identity server in ASP.NET Core? When Identity plus JWT is enough, and when OpenIddict or Duende is the SSO answer.
4 min read
IdentityServer login loops and redirect_uri mismatch — Duende / OpenIddict client URIs, Angular redirectUrl, post_logout, and PathBase. Not the Identity vs SSO decision.
Updated Published 9 min read
Leaving IdentityServer / IdentityServer4 for OpenIddict on ASP.NET Core — client inventory, keys, Angular OIDC breaks, and a cutover checklist from healthcare and SaaS work.
6 min read
MapIdentityApi opaque tokens vs JWT in ASP.NET Core — when to use each, cookie vs bearer, and the trade-offs with Angular SPAs.
11 min read
Blazor WASM authentication with ASP.NET Core Identity: a same-origin HttpOnly cookie, or OIDC PKCE when the WASM app is hosted on another origin.
4 min read
How an Angular app and an ASP.NET Core API use Microsoft Entra ID: which token the API accepts, the audience and scope checks that cause 401s, and when a BFF is the better shape.