Finding a reliable and reliable STS implementation

Question

I came across a project that uses user authentication through the WCF service, which returns a set of claims based on some data that identifies the user, close to the username and password. Then, in addition to this, I have a custom STS obtained from Microsoft.IdentityModel.SecurityTokenService , which is in the ASP.NET website project. This project looks like it was created with the VS2010 template, and has not been carefully processed.

A gut feeling and lots of online tips tell me that this STS project on the website is very far from the finished product. Now I am looking for an MVC-based STS that I can use while waiting for production to become available. The TinkTecture IdentityServer looks promising, but it's much more than just implementing the SecurityTokenService user output, I have no idea where to start. If someone can direct me to an open source project or go through this, or offer some recommendations on where and how I can start distributing or modifying Identity Server, that would be great.

Answer 1

Have you looked at the MSDN article by Michele Leroux Bustamante?

It is a little old and based on WCF, but it has code to accompany it.

Create a custom security token service

If you need an ASP.NET based example, Microsoft has published the following: ASP.NET Security Support Web site

There is also this STS project on CodePlex .

Answer 2

Have you looked at Thinktecture.IdentityServer v3? I use it now and is very easy to use. It is still in Beta, but RTM will be available soon. It also has good documentation and samples.

https://github.com/thinktecture/Thinktecture.IdentityServer.v3/wiki/Getting-started

https://github.com/thinktecture/Thinktecture.IdentityServer.v3/wiki

Update: Identity Server 4 is also available. It supports cross-platform deployment using .NET Core. https://github.com/IdentityServer/IdentityServer4/