New version of the Identity Provider, rebuilt from scratch with user management capabilities, and strong authentication with TOTP & FIDO2 support ( #13)
Main authentication and OIDC scenarios are tested, but an implementation guide (to document the choices made and write such a project from scratch) was not written yet.
Please find details about the implementation process on the PR #13
Notable Changes
- Add TOTP support for strong authentication
- Add FIDO2 devices support for strong authentication (such as security keys)
- Written on .NET 6
- Use the ASP.NET Razor Pages model instead of ASP.NET MVC. These models are very similar and can be interchanged easily (see this guide
- Manage user accounts through ASP.NET Identity (and the relevant database), instead of hardcoded test users
- Provide account management capabilities with ASP.NET Identity
- Integrate IdentityServer and ASP.NET Identity to support sending user claims through OIDC
- UI Changes
Complete changelist: https://github.com/microsoft/franceconnect-identity-provider-dotnet-webapi-aspnetcore/commits/v2-rc1-DotNet6