Core Technologies

OpenIddict

OpenIddict is a versatile .NET framework for implementing identity solutions using the OpenID Connect protocol, an extension to OAuth 2.0.

This library enables you to build:

  • Single Sign-On (SSO) solutions
  • Centralized authentication services
  • Secure token-based authentication flows
  • OAuth 2.0 authorization servers

In IdentitySuite: Handles all OAuth/OpenID Connect flows, token generation and API authorization.

Microsoft ASP.NET Core Identity

Microsoft Identity is the core authentication framework for ASP.NET Core, providing fundamental identity management capabilities.

Key features include:

  • User management (registration, login, profiles)
  • Role-based authorization
  • Claims-based identity
  • Integration with ASP.NET Core Identity
  • Passkey authentication using WebAuthn and FIDO2 standards
  • Phishing-resistant login with device-based authenticators (Windows Hello, Touch ID, Face ID)
  • Cross-device sign-in support with synchronized passkeys

New in .NET 10: Passkeys provide a secure, passwordless alternative that improves compliance, reduces attack surfaces, and enhances user experience.

How They Work Together

OpenIddict handles the standards-compliant authentication protocols (OAuth/OpenID Connect) while Microsoft Identity manages the user data and core authentication.

IdentitySuite seamlessly integrates both frameworks to provide a complete identity solution without requiring deep knowledge of either library.