-
Notifications
You must be signed in to change notification settings - Fork 413
Home
Jean-Marc Prieur edited this page Mar 21, 2018
·
28 revisions
Welcome to the azure-activedirectory-identitymodel-extensions-for-dotnet wiki!
This repository, Identity Model Extensions contains the source code for 6 NuGet packages:
NuGet package | Description |
---|---|
Microsoft.IdentityModel.Logging | Includes Event Source based logging support. |
Microsoft.IdentityModel.Protocol.Extensions | Provides an assembly containing classes which extend the .NET Framework 4.5 with base constructs from the OpenId Connect and WS-Federation protocols |
Microsoft.IdentityModel.Protocols | Provides base protocol support for OpenIdConnect and WsFederation. |
Microsoft.IdentityModel.Protocols.OpenIdConnect | Includes types that provide support for OpenIdConnect protocol. |
Microsoft.IdentityModel.Protocols.WsFederation | Includes types that provide support for WsFederation protocol. |
Microsoft.IdentityModel.Tokens | Includes types that provide support for SecurityTokens, Cryptographic operations: Signing, Verifying Signatures, Encryption. |
Microsoft.IdentityModel.Tokens.Saml | Includes types that provide support for SamlTokens version 1 and 2. |
Microsoft.IdentityModel.Xml | Includes types that provide support for Reading / Writing XML with Enveloped Signatures. |
System.IdentityModel.Tokens.Jwt | Includes types that provide support for creating, serializing and validating JSON Web Tokens. |
Sample | Illustrates | Description |
---|---|---|
active-directory-dotnet-webapi-manual-jwt-validation | System.IdentityModel.Tokens.Jwt | A .NET 4.5 WPF application that authenticates a user and calls web API using Azure AD and OAuth 2.0 access tokens. The Web API manually processes the JWT access token using the JSON Web Token Handler. |
Conceptual Documentation
- Using TokenValidationParameters.ValidateIssuerSigningKey
- Scenarios
- Validating tokens
- Outbound policy claim type mapping
- How ASP.NET Core uses Microsoft.IdentityModel extensions for .NET
- Using a custom CryptoProvider
- SignedHttpRequest aka PoP (Proof-of-Possession)
- Creating and Validating JWEs (Json Web Encryptions)
- Caching in Microsoft.IdentityModel
- Resiliency on metadata refresh
- Use KeyVault extensions
- Signing key roll over