All geek questions in one place

IdentityServer3 - for ActiveDirectory: MembershipReboot / AspNetIdentity / UserService

Hope the following question makes sense:

  • I manage my users in ActiveDirectory.
  • I authenticate them through IdentityServer3.
  • I enable the API through the AD groups the user is in (acts as a security role).

How to configure IdentityServer3:

  • Should I use my own custom service to access ActiveDirectory?
  • and will it replace MembershipReboot / AspNetIdentity support (or I don’t understand what UserService is)?
  • Or do I need to use one of the IdentityServer3 MembershipReboot / AspNetIdentity packages and somehow configure them to map to ActiveDirectory (and if so, how)?
+4
source share
1 answer

It seems that there is no “mapping” and should not be an AD mapping with reloading membership or mediation or new user repositories with reloading identifiers. The reason, apparently, is simple: mr and aspid or ir are all ways of storing user information in a permanent way (some kind of database or repository) that is already running in AD.

. ASP Identity , , , , "" "" OP ( OpenID-Connect) .

: IdentityServer4 UserService , IResourceOwnerPasswordValidator.

, (, ) IdentityServer4 UserService asp.net

+1

Source: https://habr.com/ru/post/1614599/

More articles:


All Articles