.NET Blog

Free. Cross-platform. Open source. A developer platform for building all your apps.

Identity - .NET Blog

JWT Validation and Authorization in ASP.NET Core

April 6, 2017 Apr 6, 2017 04/6/17
Jeffrey Fritz
This post was written and submitted by Michael RousosIn several previous posts, I discussed a customer scenario I ran into recently that required issuing bearer tokens from an ASP.NET Core authentication server and then validating those tokens in a separate ASP.NET Core web service which may not have access to the authentication server. The ...

Introducing IdentityServer4 for authentication and access control in ASP.NET Core

September 19, 2016 Sep 19, 2016 09/19/16
Jeffrey Fritz
This is a guest post by Brock Allen and Dominick Baier. They are security consultants, speakers, and the authors of many popular open source security projects, including IdentityServer.Modern applications need modern identity. The protocols used for implementing features like authentication, single sign-on, API access control and federation ...

ASP.NET Identity 2.2.1

April 7, 2015 Apr 7, 2015 04/7/15
pranav rastogi
We are releasing ASP.NET Identity 2.2.1. The main focus in this release was to fix issues reported in 2.2.0 release.Download this releaseYou can download ASP.NET Identity from the NuGet gallery. You can install or update these packages using the NuGet Package Manager Console, like this:Install-Package Microsoft.AspNet.Identity....

Open sourcing and releasing ASP.NET Identity 2.2.0

February 20, 2015 Feb 20, 2015 02/20/15
pranav rastogi
We are releasing the final version of ASP.NET Identity 2.2. The main focus in this release was to fix bugs and address performance issues.Open sourceWe have also made the source code publicly available on aspnetidentity.codeplex.com and will be taking contributions to the project. Check out the project home page for more details.Note: ...

ASP.NET Identity 2.2.0-alpha1

October 23, 2014 Oct 23, 2014 10/23/14
pranav rastogi
We are releasing a preview of ASP.NET Identity 2.2.0-alpha1. The main focus in this release was to fix bugs and address performance issues.Download this releaseYou can download ASP.NET Identity from the NuGet gallery. You can install or update these packages using the NuGet Package Manager Console, like this:Install-Package Microsoft.AspNet....

Changes to Google OAuth 2.0 and updates in Google middleware for 3.0.0 RC release

July 2, 2014 Jul 2, 2014 07/2/14
suhasbj
This article explains the recent changes made to Google OpenID and OAuth 2.0 along with the corresponding updates to the 3.0.0 RC release of Google OAuth  middleware.Here we will first look at the experience of using Google OAuth middleware in an MVC application with the OWIN 2.1.0 release bits. We will then explain the current changes ...

Implementing custom password policy using ASP.NET Identity

January 6, 2014 Jan 6, 2014 01/6/14
suhasbj
We recently released the 2.0.0-alpha1 version of ASP.NET Identity. Learn more here: http://blogs.msdn.com/b/webdev/archive/2013/12/20/announcing-preview-of-microsoft-aspnet-identity-2-0-0-alpha1.aspxTo provide a more secure user experience for the application, you might want to customize the password complexity policy. This might include ...

Organizational Accounts in Visual Studio 2013 RC

September 21, 2013 Sep 21, 2013 09/21/13
bchauhan
Visual Studio 2013 Preview shipped with support to create new ASP.NET projects that can be easily configured with organizational accounts. This support has been simplified and enhanced in this RC version. You can find a detailed step-by-step tutorial on creating an ASP.NET MVC project with single organizational identity at Developing ASP.NET ...

Understanding OWIN Forms authentication in MVC 5

July 3, 2013 Jul 3, 2013 07/3/13
Hongye Sun - MSFT
OverviewThe new security feature design for MVC 5 is based on OWIN authentication middleware. The benefit for it is that security feature can be shared by other components that can be hosted on OWIN. Since the Katana team did a great effort to support the OWIN integrated pipeline in ASP.NET, it can also secure apps hosted on IIS, including ...