Identity Server and Multi Tenant Applications

Building a multi-tenant application using IDSVR4 and ASP.NET Core
JWT Signing using RSASSA-PSS in .NET Core
- Article = https://www.scottbrady91.com/C-Sharp/JWT-Signing-using-RSASSA-PSS-in-dotnet-Core
- Repo = https://github.com/scottbrady91/Blog-Example-Classes/tree/master/RsaPssJwtSigning
PKCE in IDSVR4
- https://github.com/vinaylunawat/IdentityServerWithAuthorizationToken
ASP.NET Core using Proof Key for Code Exchange (PKCE)
- https://www.scottbrady91.com/OpenID-Connect/ASPNET-Core-using-Proof-Key-for-Code-Exchange-PKCE
- https://github.com/scottbrady91/AspNetCore.Pkce
ASP.NET Core Swagger UI Authorization using IdentityServer4
- https://www.scottbrady91.com/Identity-Server/ASPNET-Core-Swagger-UI-Authorization-using-IdentityServer4
Finbuckle.MultiTenant is a multitenancy library for ASP.NET Core 2.1+. It provides functionality for tenant resolution, per-tenant app configuration, and per-tenant data isolation.
- https://www.finbuckle.com (with snippets on site)
- https://github.com/Finbuckle/Finbuckle.MultiTenant
Orchard Core is an open-source modular and multi-tenant application framework built with ASP.NET Core, and a content management system (CMS) built on top of that application framework.
- http://www.orchardproject.net/
- https://github.com/OrchardCMS/OrchardCore
Readymade Identity Manager2 Implementation
ASP.NET Boilerplate –
- https://aspnetboilerplate.com/Templates (allows free creation of boilerplate for .NET Core, .NET framework, MVC, Angular project)
- Samples : https://aspnetboilerplate.com/Samples
- Comprehensive tutorials: https://aspnetboilerplate.com/Pages/Documents/Articles-Tutorials
- Optionally use paid model – https://aspnetzero.com/Features (see features)
Auth0 Trial
- https://auth0.com/docs/identityproviders
- https://auth0.com/signup?&signUpData=%7B%22category%22%3A%22button%22%7D
Training on Pluralsight by Scott Brady – Identity Lead at Rock Solid Knowledge
- https://app.pluralsight.com/profile/author/scott-brady
- https://www.scottbrady91.com/
Azure AD Supported Identity Model support matrix:
- https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/wiki/Supported-Algorithms#rsa
Authenticate using Azure AD and OpenID Connect (note old 2017, but good for understanding basics) – multiple topics with a sample Tailspin Surveys application.
- https://docs.microsoft.com/en-us/azure/architecture/multitenant-identity/
- https://docs.microsoft.com/en-us/azure/architecture/multitenant-identity/authenticate

Glossary:
- RSASSA-PSS (Probabilistic Signature Scheme) Financial Grade OpenID (PS256 PS512 etc) better then deterministic RS265, RS512 etc. (not that it is broken). Needs Microsoft.IdentityModel.JsonWebTokens version 5.5 (or greater)
Possible Issues and Related Blogs: