IdentityServer4 is Dead: Long Live OpenIddict

With IdentityServer4 reaching End of Life (and its successor Duende becoming commercial), .NET developers need an open-source alternative for OIDC providers. **OpenIddict** is the answer.

Configuration

OpenIddict integrates deeply with ASP.NET Core Identity and EF Core.

services.AddOpenIddict()
    .AddCore(options =>
    {
        options.UseEntityFrameworkCore()
               .UseDbContext<ApplicationDbContext>();
    })
    .AddServer(options =>
    {
        options.SetTokenEndpointUris("/connect/token");
        options.AllowPasswordFlow();
        options.AddDevelopmentEncryptionCertificate()
               .AddDevelopmentSigningCertificate();
        options.UseAspNetCore().EnableTokenEndpointPassthrough();
    });

Key Takeaways

• It’s more “bare metal” than IdentityServer; you build your own UI.
• Supports the full OAuth2/OIDC test suite.