IdentityServer4 with Active Directory as an Identity Provider for SSO

active-directory, identityserver4, single-sign-on

Solution

Yes, it is possible to use AD as an identity provider in IdentityServer. Take a look at mclark1129's IdentityServer4.Samples repo for an example. You can see the claims being generated in the AccountController.

While this example uses Azure AD, it is using it as a generic OpenIdConnect provider. Provided you are using a version of AD and Active Directory Federation Services (ADFS) which support OpenIdConnect, you can configure it is an upstream OpenIDConnect identity provider.

Problem

Original source