With millions of downloads in the marketplace, the open source IdentityServer4 (IS4) security framework remains extremely popular. Unfortunately, the IdentityServer4 codebase is no longer maintained and supported. As a result, by continuing to use it, you are putting your web applications at risk.
Thankfully, we offer a clear and easy-to-understand migration guide that provides detailed instructions on the process. Or for those seeking more personalized guidance, sign up for a free 30-minute IdentityServer4 assessment with our expert support team. Either choice puts you on a path to using the current supported version of Duende IdentityServer.
What is IdentityServer4?
IdentityServer4 is a free, open source framework for OAuth 2.0 and OpenID Connect in ASP.NET Core applications. But when .NET Core 3.1 reached its end-of-support timeline in December of 2022, so did IS4. As such, anyone relying on IS4 to protect their ASP.NET Core web apps must consider upgrading, because IS4 hasn't been supported for nearly three years.
Duende Software founders, Dominick Baier and Brock Allen, forked the original IS4 project as Duende IdentityServer. Note that a free licensed Community Edition of IdentityServer is also available. Upgrading to one of these options ultimately ensures the security of your organization's ASP.NET Core applications.
Why is Migrating from IdentityServer4 Critical?
IdentityServer4 contains multiple security vulnerabilities and bugs, in addition to the fact that the codebase hasn't been maintained since late 2022. You should never rely on a cybersecurity framework with obsolete code to protect your applications.
For more information on the IS4 bug list, explore the DuendeArchive project on GitHub. The archive is read-only, but you can still analyze issues and code defects. Examine the original IS4 code at this archive branch.
Exploring the Benefits of the Current Version of IdentityServer
Understanding the benefits of the latest Duende IdentityServer version highlights the importance of upgrading from IS4. Let's take a quick glance at some of the most vital benefits:
- Stronger Protection for your Web Applications: Upgrading to the latest version of Duende IdentityServer provides a stronger security footprint for your web apps.
- Improved .NET Performance: The current editions of Duende IdentityServer support the latest version of .NET. Expect improved performance and security of your web applications as a result.
- Top-Shelf Developer Support: Duende offers industry-best developer documentation and support, making migrating to Duende IdentityServer a breeze. Our resources accelerate your adoption process, helping reduce risk.
- A Simple Migration Process: Upgrading from IS4 to Duende IdentityServer may be easier than you think. Check out the options detailed in the next section for additional information and insights.
Upgrading from IdentityServer4 to Duende IdentityServer is Easy!
Duende simplifies the process of upgrading from IdentityServer4 to Duende IdentityServer. We also provide expert developer support and a robust documentation library, as noted earlier. If you are interested in upgrading, there are two options available.
We provide a detailed migration guide that takes you through the upgrade process in a step-by-step fashion. Pay attention to your current version of IdentityServer4, as the process changes based on the IS4 version. Beyond that, the guide covers each step of the migration in detail. Remember, our developer support team is ready to help if necessary.
Additionally, if you are still unsure about the upgrade process, schedule a free 30-minute assessment with our experts. We cover the entire upgrade path, as well as highlighting why migrating from IdentityServer4 is especially critical.
Ultimately, upgrading to Duende IdentityServer is essential for anyone still using IS4. It may be easier than you think, and our team is there for you every step of the way.