Skip to content

Latest commit

 

History

History
19 lines (12 loc) · 1.52 KB

sso-open-id.md

File metadata and controls

19 lines (12 loc) · 1.52 KB
Raw

Single Sign-on with OpenID Connect

Single Sign-on with OpenID Connect lets you use existing credentials configured in a UAA Server or TAS Single-Sign-on service for authentication and authorization in ASP.NET Core applications.

Usage

Steeltoe builds on top of Microsoft.AspNetCore.Authentication.OpenIdConnect. You may benefit from reading more about using OpenID Connect in ASP.NET Core.

Usage of Steeltoe's OpenID Connect provider is effectively identical to that of the OAuth2 provider, although the behind-the-scenes story is a little different. The OpenID Connect provider uses Microsoft's OpenId Connect implementation, and settings are based on Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions, with these additional properties:

Name Description Default
AdditionalScopes Scopes to request for tokens in addition to openid. string.Empty
Timeout The timeout (in milliseconds) for calls to the auth server. 100000
ValidateCertificates Validate Auth server certificate. true

Each setting above must be prefixed with Security:Oauth2:Client.

Aside from the different base class for options, the only usage change is to call .AddCloudFoundryOpenId instead of .AddCloudFoundryOAuth.