Monthly Archives: December 2019

Send MFA signin requirement to OpenID Connect server using ASP.NET Core Identity and IdentityServer4

December 18, 2019 · by · in .NET Core, ASP.NET Core, dotnet, MVC, OAuth2, Security, Web · 3 Comments

This post adds the custom ASP.NET Core Identity, IdentityServer4 logic to check for the “acr_values” and react if a client application requests MFA for authentication. The “acr_values” parameter is used to pass the mfa value from the client to the server in the authentication request. Code: https://github.com/damienbod/AspNetCoreHybridFlowWithApi Blogs in this series Force ASP.NET Core OpenID […]

Force ASP.NET Core OpenID Connect client to require MFA

December 16, 2019 · by · in .NET, .NET Core, ASP.NET Core, Azure, dotnet, MVC, OAuth2, Security, Web · 6 Comments

This article shows how an ASP.NET Core Razor Page application which uses OpenID Connect to sign in, can require that users have authenticated using MFA (multi factor authentication). Code: https://github.com/damienbod/AspNetCoreHybridFlowWithApi Blogs in this series Force ASP.NET Core OpenID Connect client to require MFA Send MFA signin requirement to OpenID Connect server using ASP.NET Core Identity […]

Using HTTP Request Routes, Request Body, and Query string parameters for Authorization in ASP.NET Core

December 2, 2019 · by · in .NET Core, ASP.NET Core, ASPNET5, dotnet · 2 Comments

This post shows how HTTP route parameters, a HTTP request body or HTTP request query string parameters can be used for authorization in ASP.NET Core. Code: https://github.com/damienbod/AspNetCoreWindowsAuth Authorization using ASP.NET Core Route parameters An AuthorizationHandler can be used to implement authorization logic in ASP.NET Core. The handler can authorize HTTP requests using a route parameter […]