c# - Leveraging IdentityServer4 in an existing eco system -


i'm on project there existing angular 1.3 app couple of api's. these secured via azure active directory.

the customer has asked new tool developed uses these same api's want rid of aad because it's tokens valid 1h , i've been told refresh tokens , aad not working according made current setup.

i've been reading lot on identityserver4 , hoping leverage middleware in order a) start using sts b) prepare future , make sts central part whole installation.

i've been hoping use identityserver4 new developed angular4 app asp .net core 2.0 webapi.

the question have is: can active directory based auth (the users logging in through citrix alike product) , authenticated because of that. yet somehow still calling existing api's token valid in context.

and can use identityserver4 pull off? idea? i'm open suggestions

edit

after careful delibiration client we've agreed remove aad , token security in place. reasoning:

  1. all installations done in dmz
  2. it's not azure
  3. the customer isn't willing change that
  4. this way can secured using windows authentication
  5. time constraints
  6. is on planning when (5) loosens up
  7. a lot of new tech going go in new client enforces (5)


Comments

Popular posts from this blog

angular - Ionic slides - dynamically add slides before and after -

minify - Minimizing css files -

Add a dynamic header in angular 2 http provider -