IdentityServer

Duende SoftwareCommunication & Messaging Tools.NET
Version v8.0.5 (Aug 10, 2026)

Flexible OpenID Connect and OAuth 2.0 framework for ASP.NET Core.

  • Fully customizable user interface and authentication workflows.
  • Supports advanced security scenarios including token exchange and federation.
  • Compatible with various hosting environments and extensive protocol standards.
Duende Software logo

Prices from:

Loading...
Available individuallyOur Price
IdentityServerLoading
Build identity and access control solutions for modern applications.
IdentityServer is a modular framework that implements OAuth 2.0 and OpenID Connect protocols for ASP.NET Core, allowing developers to tailor authentication, authorization, and token issuance workflows to complex security requirements. It provides robust extensibility for integrating diverse identity providers and handles secure token issuance and validation in various deployment settings.

Standards-Compliant Framework

Implements OAuth 2.0 and OpenID Connect standards, including support for many advanced and extended specifications, ensuring interoperability and adherence to modern security standards in identity management.

Extensible Core Engine

Offers a modular architecture with extensible services and APIs, enabling customization of authentication, authorization, token issuance, and user interaction workflows.

Advanced Security Features

Supports scenarios like federation with external identity providers, token exchange mechanisms, sender and audience-constrained tokens, as well as Proof of Possession tokens with DPoP or mTLS.

Customizable User Interface

Allows full control over user interface components and user experience, supporting any UI framework or technology to integrate seamlessly with the token engine.

Support for Multiple Hosting Environments

Compatible with deployment in cloud, on-premises, Docker, Kubernetes, Windows, and Linux environments, supports flexible hosting and storage options.

Dynamic Configuration Management

Enables dynamic loading and updating of external authentication providers and supports automatic signing key management including rotation, secure storage, and retirement.

Robust Operational Stores

Includes built-in support for storing configuration and operational data via In-Memory, JSON file, or EntityFramework-based stores to suit various persistence needs.

Auditing and Logging

Provides extensive event logging and auditing capabilities with integration for OpenTelemetry, aiding in security monitoring and compliance efforts.

Support for Modern OAuth Features

Incorporates support for Pushed Authorization Requests, Dynamic Client Registration, multi-authority configurations, server-side sessions, and resource isolation to enhance security.

Product Compatibility

Review the details below to ensure this product is supported within your environment.

Component Type

  • .NET

.NET Version

  • .NET 10 LTS
  • .NET 9 STS
  • .NET 8 LTS

.NET Platform

  • ASP.NET Core Assembly

IDE Support

  • Visual Studio