Choosing an identity solution

Different options are available to authenticate users with .NET solutions. If you require a local database that can manage users, you can use ASP.NET Core Identity, which makes use of EF Core (see Chapter 5). It allows you to store local users and integrate user accounts, such as those from Microsoft, Facebook, and Google, with OpenID Connect (OIDC). For the database, SQL Server and MySQL can be used, while the data schema is completely customizable.

To reduce the work required, and to enhance security, it’s not necessary to implement this functionality with every service – here, Microsoft YARP can be used to forward the requests and send the required claims.

If external applications are accessing the identity management solution, an OIDC server should be used to manage identities. If storing user data in a cloud service is not an option, a third-party service such as Identity Server from Duende (https://duendesoftware.com/products...