How to deploy TheIdServer with Docker?

TheIdServer includes Docker support with specific Dockerfiles for both the server and admin app. You can build images using the commands in the README, and it integrates health checks for container orchestration in production environments.

TheIdServer vs Keycloak which should I use?

TheIdServer is .NET-based with deep ASP.NET Core integration and excels in SAML 2.0 support alongside OIDC, but requires a Duende license for commercial use. Keycloak is Java-based with a larger ecosystem and is fully open-source, making it better for cross-platform teams.

Does TheIdServer support social logins like Google?

Yes, it supports dynamic external provider configuration for social logins, but setup requires manual configuration through the admin UI or code, unlike pre-packaged solutions.

Is TheIdServer free for commercial projects?

No, while the project itself is open-source, it depends on Duende IdentityServer, which mandates a paid license for commercial deployments, as clearly stated in the setup documentation.

How to migrate from IdentityServer4 to TheIdServer Duende?

Migration involves updating to Duende IdentityServer, which may require code changes and license acquisition. TheIdServer provides documentation for setup, but specific migration steps are not detailed, so careful planning is needed.

What databases can I use with TheIdServer?

It supports a large choice of databases via Entity Framework Core, including SQL Server, PostgreSQL, and SQLite, allowing flexibility based on your infrastructure needs.

TheIdServer

Apache-2.0C#11.0.0

An open-source identity and access management server supporting OpenID Connect, OAuth2, WS-Federation, and SAML 2.0 with a built-in admin UI.

Visit Website

What is TheIdServer?

TheIdServer is an open-source identity and access management server that implements OpenID Connect, OAuth2, WS-Federation, and SAML 2.0 protocols. It provides a centralized solution for authenticating users and authorizing applications, built on Duende IdentityServer and ITFoxtec Identity SAML 2.0 frameworks. The project includes a full-featured admin UI for managing all aspects of identity configuration.

Target Audience

Developers and organizations needing a self-hosted identity provider for their applications, especially those requiring support for multiple authentication protocols like SAML 2.0 alongside OpenID Connect and OAuth2.

Value Proposition

It offers a unified, extensible platform with comprehensive protocol support and administrative capabilities, serving as a free, open-source alternative to commercial identity servers while maintaining compatibility with enterprise authentication standards.

Overview

OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI

Use Cases

Best For

Implementing a self-hosted identity provider for internal enterprise applications

Related Projects

Community-curated · Updated weekly · 100% open source

Found a gem we're missing?

Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.

Submit a project Star on GitHub

GitHub

757 stars91 forks0 contributors

Unifying authentication across applications using both modern (OIDC/OAuth2) and legacy (SAML 2.0/WS-Federation) protocols

Managing user identities, clients, and API access through a web-based admin interface

Building applications that require dynamic external provider configuration

Deploying identity services with Docker containerization

Organizations needing keys rotation and advanced security features for token management

Not Ideal For

Organizations unwilling to pay for Duende IdentityServer licenses in commercial deployments
Teams needing a fully managed, cloud-hosted identity service with zero server maintenance
Projects requiring only basic OAuth2/OpenID Connect without SAML 2.0 or WS-Federation support
Startups seeking plug-and-play social login integrations without dynamic configuration setup

Pros & Cons

Pros

Multi-Protocol Versatility

Supports OpenID Connect, OAuth2, WS-Federation, and SAML 2.0 in a single server, enabling seamless integration across modern and legacy authentication systems as highlighted in the key features.

Comprehensive Admin Interface

Provides a web-based UI for managing users, clients, APIs, and external providers with detailed documentation links, reducing manual configuration overhead.

Database Agnostic Design

Compatible with a wide range of databases via Entity Framework Core, allowing flexibility in choosing SQL or NoSQL backends as stated in the setup.

Advanced Security Controls

Includes keys rotation, token exchange (RFC 8693), and server-side sessions, enhancing security and compliance for enterprise environments.

Cons

Commercial Licensing Cost

Built on Duende IdentityServer, which requires purchasing a license for commercial use, adding financial overhead compared to fully open-source alternatives.

Complex Configuration Burden

Setup involves multiple steps like database configuration, keys management, and external provider dynamic setup, as evidenced by extensive documentation and the recent Azure Key Vault SDK migration note.

Dependency Risks

Relies on external frameworks (Duende IdentityServer and ITFoxtec SAML), which may introduce breaking changes or compatibility issues, as seen with the mandatory Azure Key Vault SDK update.

Frequently Asked Questions

Home

Blazor

BlazorBoilerplate

Blazor Boilerplate / Starter Template with MudBlazor

Stars1,914

Forks364

Last commit1 year ago

BlazorWithIdentity

A project template for a blazor hosted app using cookie based authentication with ef core identity.

Stars473

Forks105

Last commit3 years ago

Blorc.OpenIdConnect

Blorc.OpenIdConnect provides a robust and secure way to integrate OpenID Connect authentication into Blazor applications. It simplifies the implementation of the Authorization Code Flow with Proof Key for Code Exchange (PKCE), which is the recommended method for securing single-page applications. ## Key Features - **PKCE Support** — Implements the Authorization Code Flow with Proof Key for Code Exchange to prevent CSRF and authorization code injection attacks. - **Automatic Token Management** — Handles access token delegation, expiration, and silent renewal automatically. - **Flexible Configuration** — Supports configuration via appsettings.json or programmatic options with extensible query and token parameters. - **User Info Loading** — Optionally loads additional identity data from the user info endpoint to populate user profiles. - **Identity Server Integration** — Designed to work with identity providers like Keycloak and Auth0 following standard OpenID Connect specifications. ## Philosophy The library follows a secure-by-design approach, enforcing modern authentication standards while providing a developer-friendly API that integrates seamlessly with Blazor's component and service model.

Stars97

Forks11

Last commit1 day ago

BlazorWasmOidcKeycloak

Blazor WebAssembly Standalone App with OIDC Authentication

Stars7

Forks2

Last commit2 years ago

Entity Framework Core