0

There is a lot of information and documentation available regarding how to add external identity providers such as Google, Facebook, Microsoft, etc.

Does IdentityServer4 support being the external identity provider for another for another OpenID Connect server (perhaps another IdentityServer4 instance)?

If so, how do you set this up? If my IdentityServer4 instance (Instance A) is acting as the external provider for another IdentityServer4 instance (Instance B), what kind of client do I need to setup on Instance A for Instance B?

Any documentation or samples on the subject would be extremely helpful.

Jon Halliday
  • 395
  • 3
  • 14

1 Answers1

1

Yes, you can achieve this with IdentityServer. In this case it would work 'like' any other 3rd party identity provider (Facebook, Google, etc.)

So for example -- in this case you should configure your app with an authentication that your own identity provider exposes, instead of 'Google' -- refer to this documentation page:

http://docs.identityserver.io/en/latest/topics/signin_external_providers.html?highlight=external%20identity%20provider

You may run into issues (at least this was the case in 2017) -- see this older question IdentityServer used as external identity provider for another IdentityServer fails to properly redirect

Hopefully this puts you to the right track. Happy hacking!

Alexey Adadurov
  • 174
  • 1
  • 5
  • Thanks - that does help some. I guess this all boils down to what kind of client to setup inside Instance A for Instance B to use. The question you linked seems to suggest HybridAndClientCredentials, but during his troubleshooting process he changed it up. I'll have to play around I guess – Jon Halliday Feb 18 '21 at 19:42