locked
What is the best authenticate middle-ware for asp.net mvc, web api and mobile applications? RRS feed

  • Question

  • We are planning to start a enterprise application and I would like to separate my authentication work as a service and make my complete applications are single sin on model. I am looking for third party solutions like "Windows Azure AD" & "Thinktecture (identity & access control)". What are best possible ways to provide a solution for this and how do I evaluate system?
    Thursday, April 10, 2014 10:40 AM

All replies

  • 1. I think the Thinktecture IdentityServer v3 and IdentityManager v1 are a good choice: http://thinktecture.github.io/ Checkout or download the latest sources and demos from GitHub: https://github.com/thinktecture/Thinktecture.IdentityServer.v3

    The identityServer will provide all the OAuth2 protocol flows, supports OpenID Connect, a lot of example clients, good video tutorials and good blog posts from the Thinktecture MVPs (Christian Weyer, Dominick Baier..). Maybe you can start here (find video tutorials etc):

    https://github.com/thinktecture/Thinktecture.IdentityServer.v3/wiki

    Dominicks Blog: http://leastprivilege.com/

    Please notice that the newest versions are still previews! But it will be a good idea to wait for them. Contact the team if you have any questions, they will help you as soon as possible.

    2. You can use the standard OWIN implementation from Microsoft called Katana or implement the middleware for yourself: http://www.asp.net/aspnet/overview/owin-and-katana/an-overview-of-project-katana

    I hope that helps a little bit. If you have any questions, please do not hesitate to contact me!

    Monday, May 19, 2014 2:56 PM