[Question] Single Sign On: Azure AD B2C vs IdentityServer4, and others

I came across this great article below, which uses IdentityServer4. https://docs.microsoft.com/en-us/xamarin/xamarin-forms/enterprise-application-patterns/authentication-and-authorization

However, I have problem deciding which tool/framework to use for implementing Single Sign On for our project. Q1. Based on what reasons does Microsoft team decide to use IdentityServer4 on the link above?

Q2. What aspects and pros and cons should we consider when choosing the tool?

For example, one of the criteria for choosing a tool is its community. Based on my perception, the community of IdentityServer4 seems less popular (please correct me if I am wrong).

Specifically, we need to implement SSO within our firm for the scenario below:

1. To implement SSO, the server side can be custom made like using IdentityServer4 or off-shelf solution like B2C or others
2. Android mobile apps can login via user/password entered by users.
3. Our firm manage all devices, and install certificate on all devices, and manage the identity server.
4. All apps running on server side that the Android mobile app needs access to are owned by us.

Q3. What other framework/solution is available, apart from IdentityServer4 and B2C?

Any links or advice would be very much appreciated.

https://docs.microsoft.com/en-us/xamarin/xamarin-forms/data-cloud/authentication/

[tiagopsantos]

Hello, what’s your opinion over the following news?

Warning As of Oct, 1st 2020, we started a new company. All new feature work will hapen in our new organization. The new Duende IdentityServer is available under both a FOSS (RPL) and a commercial license. Development and testing is always free. Contact us for more information. IdentityServer4 will be maintained with bug fixes and security updates until November 2022.

Does it have an impact in the decision Azure AD B2C vs IdentityServer4 in future projects?

I’m starting a new project, we have teams with expertise in IdentityServer4, but now I’m a bit cautious over the news…

[CESARDELATORRE]

IdentityServer4 is the only modern framework for .NET Core and ASP.NET Core that supports ASP.NET Core Identity while using tokens compatible with the multiple approaches we have:

• .NET Core microservices (Web API)
• Web Apps (ASP.NET Core MVC and SPA with Angular)
• Xamarin apps

When you say “IdentityServer4 seems less popular”. It is less popular than what? IdentityServer4 is pretty popular in the ASP.NET Core world when you want to also use ASP.NET Core Identity with the same tokens for multiple types of apps (web, services, mobile).

Based on your requirements above, I’d say you can do it all with IdentityServer4.