IdentitySuite combines the power of OpenIddict and Microsoft Identity into a seamless ASP.NET Core solution—ready to deploy, easy to configure, and built to simplify secure authentication. #identitysuiteidentitysuite.net
Local JWT validation is fast — but it can't detect revoked tokens.
OpenIddict introspection checks token status on every request, directly with the auth server.
That's the difference between "probably valid" and "definitely valid".
👉 identitysuite.net/blog/ident…#openiddict
Authentication cookies ≠ tracking cookies.
Same technology. Completely different purpose.
One follows you around the web for ads. The other keeps you logged in securely.
Here's how web authentication actually works 👉 identitysuite.net/blog/ident…#identitysuite#aspnetcore
JWT token carries:
🔹 Who you are (sub) 🔹 What you can do (roles, scopes) 🔹 When it expires (exp) 🔹 A signature that proves it hasn't been tampered with
No database lookup needed on every request.
👉 identitysuite.net/blog/ident…#identitysuite#aspnetcore
OpenIddict in production needs:
✅ Persistent certificates ✅ Explicit token lifetimes ✅ PKCE enforced ✅ Exact redirect URI matching ✅ Token revocation
IdentitySuite handles all of this out of the box.
👉 identitysuite.net/blog/ident…#openiddict#identitysuite
OpenIddict doesn't make security decisions for you.
That's not a criticism — it's by design. But it means every configuration choice is yours to get right.
Here's where most developers get it wrong 👉 identitysuite.net/blog/ident…#openiddict#identitysuite
OpenIddict is not a SaaS. Not a cloud platform. Not a hosted service.
It's a library you add to your .NET project — and it handles the full OAuth 2.0 OpenID Connect stack.
Here's what it actually does 👉 identitysuite.net/blog/ident…#openiddict#identitysuite
🚀 New in IdentitySuite: the Dashboard is here!
Logins, tokens, certificates, locked accounts — everything you need to monitor your auth server, in one place.
Real-time trends, security alerts, and a full admin audit trail. At a glance. ⚡
#identitysuite#openiddict#aspnetcore
✨ NOW on Community Day at .NET Conf 2025 ✨
Rolling Your Own SSO: A Practical Guide with OpenIddict
11:30 PM - 12:00 AM PST
Join us LIVE ➡️ msft.it/6013tJkXB
Follow the conversation: #dotNETConf
ALT dotnet conf title slide.
text reads: Now on .NET Conf 2025 Community Day
Rolling Your Own SSO: A Practical Guide with OpenIddict
Dustin Kingen
November 13, 11:30 PM - 12:00 AM PST
Version 1.1.0 released with new features:
- Configurable rate limiting
- Revamped OIDC/OAuth2 endpoints for OpenID Connect certification
- Updated OpenIddict to 7.0
identitysuite.net/documentat…