IdentityServer について

Build identity and access control solutions for modern applications.

IdentityServer by Duende Software is a modern, flexible, and standards-compliant OpenID Connect and OAuth 2.1 framework for ASP.NET Core, designed to handle authentication and authorization for web, mobile, and native applications. It serves as a central identity provider (IdP), enabling secure access control and single sign-on (SSO) capabilities across distributed systems. IdentityServer supports a wide range of scenarios, including API security, federation, identity delegation, and token issuance, while offering extensibility for custom policies and integration with external identity providers. As a commercial solution, it combines enterprise-grade features with ongoing support and regular updates, making it a robust choice for organizations seeking secure and scalable identity management within the .NET ecosystem.

IdentityServer is available in different editions; Starter, Business, and Enterprise. Each tailored to accommodate varying organizational needs and complexities.

Starter Edition
The Starter Edition provides the foundational implementation of OpenID Connect (OIDC) and OAuth protocols, making it suitable for organizations with basic authentication and authorization requirements. Key features include:​

  • Core Protocol Support: Implements essential OIDC and OAuth standards.​
  • Client Limitations: Supports up to 5 unique token requestors (OAuth client IDs or relying parties) in self-hosted environments.​
  • Deployment Scope: Permits a single logical deployment.​
  • Support Level: Includes standard developer support.​
  • External Authentication Providers: Allows integration with an unlimited number of external authentication providers.

This edition is ideal for organizations seeking a cost-effective solution for straightforward identity management needs.​

Business Edition
Building upon the Starter Edition, the Business Edition introduces advanced features to support more complex scenarios. Enhancements include:​

  • Additional Protocol Features: Supports server-side sessions and automatic signing key management.​
  • Client Capacity: Accommodates up to 15 unique token requestors in self-hosted environments.​
  • Deployment Scope: Allows for a single logical deployment.​
  • Support Level: Provides standard developer support.​
  • External Authentication Providers: Continues to support an unlimited number of external authentication providers.

This edition is well-suited for organizations requiring enhanced security features and greater client capacity.​

Enterprise Edition
The Enterprise Edition encompasses all features of the Business Edition and introduces capabilities designed for organizations with intricate architectures or heightened security demands. Key additions include:​

  • Advanced Features: Supports resource isolation, OpenID Connect Client-Initiated Backchannel Authentication (CIBA), and dynamic federation.​
  • Unlimited Clients: Supports an unlimited number of unique token requestors in self-hosted environments.​
  • Deployment Flexibility: Permits unlimited logical deployments.​
  • Support Level: Offers priority developer support.​
  • External Authentication Providers: Maintains support for an unlimited number of external authentication providers.

This edition is tailored for enterprises managing complex systems and requiring comprehensive identity management solutions.