ASP.NET Core 3 - IdentityServer4 - Ep.19 External Providers (Facebook)

In this video we take a look at how to implement external providers with a Facebook example.

#csharp #auth

[umerwaqas]

Haven't seen any precise and complete guide like this. lucky to find your videos. Thank you so much.

[drspyqwerty]

HI there Anton!!
Brilliant series, with so much info. I've watched each nearly twice to absorb all the intricacies.

[peterwidmer]

Thank you very much!! I was following through the whole Identity Server 4 series. Just awesome, as I have now a fully working example with normal registration and facebook registration.

[PelleWidell]

Do you have any plans on adding an video on how to add external provider for AzureAD? I think many wants to create an MVC site that is secured with an IdentityServer and from ID use AAD-accounts coming from AzureAD.
I tried to just add
.AddOpenIdConnect("AzureAD", "Login with Azure AD", options => but get error on page signin-oidc
Exception: Correlation failed. Unknown location.
I cant find any example where you handle signin-oidc on ID4 part?

[SuperMika]

Hi Anton,
I did not understand what the returnUrl is and where should I get it.
I am trying to create a Facebook login using asp.net core 3 and react.js (spa) should i follow this approach?

[swastikprince]

Hello Anton, quick question.. is it possible to store tags and node in sql and create XML?

[soportetecnicointerpro]

I need to know how to do an autologin, what happens is that I already have my page with identity security, that is, it asks for a username and password when entering the main page, what I want is that from another application when that page is called, it no longer asks for the login

[drspyqwerty]

Question re lifespan of a controller:
Reagrding public class AuthController : When a user is directed to signin How long will the data in SignInManager<IdentityUser> _signInManager; be accessible?
In the case of user directed to sign in, User chooses external signiin, user must register first: how long is the sign in manager persisted, particularly as the user is navigating away to an external site to register, and then is returning again?

[ashishdeora]

Similar to facebook, can I also connect with Azure AD for user store?

[_]

Hi,
there is still a point that doesn't make sense to me.
if i tried to cheat a lil bit and sign in to the identityServer and then logout from the idsrv but without logging out from the MvcCLient, my access token will still be valid. so when i call ApiOne/secret page, i get the "secret message from ApiOne" even though i'm not signed in.
so first: what's the point of signing in to idsrv if a hacker can just mimic a valid access token, add to it all the required claims and rols and get the secret message?
seconed: how ApiOne get know that the access token is sent from a "Signed in user"?
i think the api should have a functionality that sends the id token and the access token to the identityServer to validate them before authorizing the user.

long question, i'm a noob at wording :)

[drspyqwerty]

Question re Identity server 4 and Blazor.
Since blazor supports server side rendering, and client side rendering,
Will the procces for authentication & authorization in Blazor server side client be the same as the MVC client, And will a blazor client side app Authorize and authenticate the same as a javascipt client?

[Solmead]

What about using the prebuilt identity ui that a default site with auth uses? Is that recommended at all?

[morzco]

Hello, do you have some examples or information how to configure IS4 with external provider AD FS? Can't find any information at all(

[alirioangel]

Hi there, how can i do if im not using internal views because im serving the rest api to a mobile app?

[JAGANDIGITECH]

Great effort. Thank you.
Looking forward to learn more from you..

[ricardothomas]

Hello Anton.
Happy Holidays to you and yours.
Question, please could you do a video on email verification and 2 Factor authentication when using IdentityServer4 ?

[sayoojt]

Hello Anton, Gone through the entire video series of IdentityServer4, I am working on project in my organisation to migrate existing dotnet framework Owin to IdentityServer4, This series was very helpful for me. Like to discuss more on the implementation with you, please do let me know which will be ideal platform for one to one discussion.

[shahzaibh]

How about signout?can you make a tutorial on it too?logout from facebook and identityserver both

[origrim]

Is it possible to add external login from js client? I run into an issue with cors problem and cannot figure out how to solve that.

[zeeshandar]

Hi,
Thanks for providing such valuable information on identityserver. It really helped.
Also please talk about of case where application with custom login page needs to connect to identityserver