Using IdentityServer

[markosimulak]

What do you think about using IdentityServer along with this approach?
It will be more complex, I know, but is there any advantages use IdentityServer?

[justSteve]

I think the primary advantage would be it's status as the de facto gold standard for identity management. Yeah, it's complex but there are very few (any?!) things more important that secure, robust management of users' identity.

[jiscanlon]

Agree, 100%. The great thing about IDS is that as an IDP I can go in memory or DB for prototyping but I can also easily hook to any other provider you want as well (AzureAD, AzureADB2C, ADFS, 3rd Party (Google, Facebook, twitter etc. al), as a single solution or extend things a bit support multiple of these at one time. The licensing for the .NET 5+ Duende version may be an issue for some but overall I think it would be value added for many people.

[justSteve]

re Licensing: If I'm understanding correctly the updated terms (adjusted after an outcry that the original pricing was pretty expensive) is that any organization making less that $1million is free to use. Have I got that right?

[jiscanlon]

Yes, that is how I understand it as well. Either way you look at it, the audience on the free for use or license is pretty big and either audience could make good use out a template like this. For those who need a commercial license, the amount isn't out of bounds at all in my opinion. After all, they need to be able to continue to support the product so no complaints. I do work for parties on both sides of the issue. It is as fair as can be without being free and clear in my opinion but that's just my 2 cents.

[jiscanlon]

Just thinking about this a little more but if you use IDS in a project that makes use of it like this (generating code etc) you may want to put some up front and highly visible notification about the potential need to have a license. Check out how MS is handling it with their Templates in VS 2022. They are continuing to use IDS moving forward but making it known that you may need to look into licensing a product being used.

[iammukeshm]

Licensing was something that I didn't want to deal with for an Open Source Project, IDS authors were particular in that as well. Not very sure of the 1M thingy. But will check how feasible it is not integrate IDS into FSH given that it should be switchable to MS Identity as well.

[markosimulak]

Great! Thank you very much for discussion.