Identity.Server
A self-hosted, standards-compliant OAuth 2.0 and OpenID Connect server — become your own identity provider in hours, not weeks.
using Kanject.Identity.Server;
// Register your app as a client
builder.Services.AddKanjectIdentityServer(options => {
options.Issuer = "https://auth.mycompany.com";
options.AddClient(new Client {
Id = "web-app",
Grants = { GrantTypes.AuthorizationCode },
Scopes = { "openid", "profile", "wallet.read" },
});
});
app.UseKanjectIdentityServer(); Standards-compliant SSO, in your cloud.
OAuth 2.0 flows
Authorization Code, PKCE, Client Credentials, Device Code.
OIDC discovery
Full .well-known/openid-configuration endpoint.
Client management
Admin UI for apps, secrets, redirect URIs, scopes.
Token introspection
RFC 7662 endpoint for resource servers.
Federation
Delegate to upstream IdPs (Azure AD, Okta, etc.).
Consent screens
Customizable, brandable user consent experience.
Built in .NET.
Spoken in every language.
Every Identity.Server module ships as both a NuGet package and an official Docker image — runs on ECS, EKS, Fargate, App Runner, or your laptop. Call its HTTP/gRPC API from Python, Go, Node, Java, Rust, or anything else that speaks the wire.
- ✓Multi-arch images:
amd64+arm64from the same tag - ✓OpenAPI + gRPC reflection enabled out of the box
- ✓Same configuration surface — env vars, Parameter Store, file
Kanject.Identity.Server ships into your AWS, registers itself with one line in Program.cs, and exposes a typed C# API the rest of your service can use immediately.
Simplify your cloud
journey today.
Join forward-thinking developers and businesses who trust Kanject to eliminate cloud complexity and accelerate innovation.