Getting Started with Identity and Single Sign-on (SSO)

In our opinion, the best way to start is to is by getting an understanding of the underlying protocols that IdentityServer implements: OAuth and OpenID Connect.

IdentityServer itself is a framework that provides a vanilla implementation of these protocols, and understanding how they work will help when it comes to architecting and debugging your solution.

The next three options provide different formats for you to grasp the basics of the underlying protocols.

A good starting point is this 1.5-hour Pluralsight course by IdentityServer.com's Scott Brady that covers everything from why OAuth is the preferred solution for API security, the various flows available to you, and security best practices.

If you prefer learning from a textbook, we recommend OAuth in Action by Justin Richer and Antonio Sanso.

This again takes you through the various topics around OAuth and OpenID Connect, but you can also follow along with the code samples, hacking together a basic OAuth authorization server written in JavaScript. While this may not be production-ready, if you prefer a hands-on learning approach, this can be really useful.

In one of the most respected videos in the identity space, developer Nate Barbettini breaks down how OAuth 2.0 and OpenID Connect work.

A great video for beginners who are very new to the Identity space.

Now that you have the fundamentals of OpenIDConnect and OAuth, it's time to start building a proof of concept where you can prove SSO working. 

To make this as easy as possible, we have a Docker image that includes IdentityServer and a UI to manage it (AdminUI). Additionally, install a sample client app for testing. 

If you would rather build the solution from scratch you can skip this step and move to "Building Your First Solution".

Now it is time to build a solution where you have full control. 

This video tutorial series will guide you in:

• Installing Duende IdentityServer with In-Memory Stores
• Writing an API Client
• Writing a Web client, that will also call the API
• Updating Duende IdentityServer to use Entity Framework Stores
• Update Duende IdentityServer to use ASP.Net Identity for its user store

Want to expand your knowledge further, consider the following articles and videos:

• Watch: Adding a SAML Service Provider
• Watch: Setting up a SAML Identity Provider
• Read: Using FIDO for passwordless authentication