Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion docs/intro/support.rst
Original file line number Diff line number Diff line change
Expand Up @@ -52,9 +52,10 @@ We have a range of available `products <https://www.identityserver.com/products>
* `AdminUI <https://www.identityserver.com/products/adminui>`_ - The most trusted and advanced management portal for IdentityServer. Secure, intuitive, built for extensibility and scale. Take the complexity out of identity.
* `SAML2P <https://www.identityserver.com/products/saml2p>`_ - The only SAML plugin offering full IdentityProvider (IdP) and Service Prover(SP) support. With seamless IdentityServer integration and trusted for secure enterprise SSO across any platform.
* `WS-Federation <https://www.identityserver.com/products/ws-federation>`_ - The best way to integrate WS-Fed supported applications (SharePoint) with IdentityServer. Perfect for Microsoft ecosystem and cross-protocol SSO (OIDC and WSFED)
* `FIDO2 <https://www.identityserver.com/products/fido2-for-aspnet>`_ - Industry leading Passkey authentication for ASP.NET. FIDO2 certified, phishing-resistant, and ready for passwordless login. Passwordless, effortless and secure in only a few lines of code.
* `FIDO2 <https://www.identityserver.com/products/fido2-for-aspnet>`_ - Industry-leading Passkey authentication for ASP.NET. FIDO2 certified, phishing-resistant, and ready for passwordless login. Passwordless, effortless and secure in only a few lines of code.
* `SCIM <https://www.identityserver.com/products/scim-for-aspnet>`_ - SCIM 2.0-powered identity automation. Provision users and sync identities effortlessly across your enterprise. Fully integrated with IdentityServer for streamlined IAM and HR workflows.
* `Dynamic Authentication Providers <https://www.identityserver.com/products/dynamic-authentication-providers>`_ - Ideal for adding and configuring external identity providers in ASP.NET Core.
* `Enforcer <https://www.identityserver.com/products/enforcer>`_ - Enforcer allows you to write human-readable access control policies for your .NET applications.
* `Key Rotation <https://www.identityserver.com/products/key-rotation>`_ - The Key Rotation component for IdentityServer allows your .NET IdentityServer to automatically generate and rotate Signing Keys, reducing the need for manual maintenance and redeployments.

For any of the above, or if you have other needs, please `get in touch <mailto:sales@identityserver.com>`_ to discuss how we can help you.
7 changes: 5 additions & 2 deletions docs/migrating/from_duende.rst
Original file line number Diff line number Diff line change
Expand Up @@ -113,13 +113,16 @@ Migration Steps
// Explicit key registration
builder.Services.AddIdentityServer()
.AddSigningCredential(certificate);


If you have a `Rsk.KeyRoation <https://www.identityserver.com/products/key-rotation>`_ license or an Open.IdentityServer
supporter license, you will also be able to switch to using this product for your key rotation. Here is the
`installation guide <https://docs.identityserver.com/key-rotation/installation/>`_ for Open.IdentityServer.

.. warning::
If configuring the read-only key store, all keys created within a 90 days will be considered valid, and the newest
key within this timespan will be registered as a signing key. The extension method used to register the
compatibility store allows you to configure this ``.AddCompatibilityKeyStores(opt => opt.MaxLifetime = TimeSpan.FromDays(120))``.


5. **Migrate the database schema (if applicable)**

The Entity Framework schema for Open.IdentityServer is compatible with Duende.IdentityServer. In most cases no database migration is required. However, if your Duende version included tables for unsupported features (e.g. server-side sessions or dynamic providers), those tables can be safely left in place — they will simply be unused.
Expand Down
4 changes: 2 additions & 2 deletions docs/topics/crypto.rst
Original file line number Diff line number Diff line change
Expand Up @@ -44,9 +44,9 @@ This process is also commonly referred to as key rotation. There are many ways t
- write some logic to automatically manage them
- use a 3rd party tool to do it for you

A commercial key rotation component for Open.IdentityServer is planned from Rock Solid Knowledge and is on the roadmap.
A commercial `key rotation component <https://www.identityserver.com/products/key-rotation>`_ for Open.IdentityServer is available, which will automate this process for you.

.. Note:: With v1 of Open.IdentityServer you will be able to get :ref:`read-only access <refReadOnlyKeyStore>` to the keys managed by Duende IdentityServer but rotation will be disabled
.. Note:: With v1 of Open.IdentityServer you will be able to get :ref:`read-only access <refReadOnlyKeyStore>` to the keys managed by Duende IdentityServer but rotation will be disabled. You can mix this

Data protection
^^^^^^^^^^^^^^^
Expand Down
Loading