Standards-based issuance
OpenID Connect authorization code and refresh-token flows backed by OpenIddict.
← Product family
Enterprise identity infrastructure
CoreIdentity
A tenant-aware identity and OpenID Connect platform for organizations that need modern authentication, explicit policy, secure token issuance, and operational ownership.
01 / THE PRODUCT
Identity that understands
the product boundary.
CoreIdentity combines ASP.NET Core Identity, OpenIddict, SQL Server, and tenant-specific authentication policy. It supports the flows applications expect while keeping enrollment, factors, and client ownership explicit.
Authentication, deliberately composed
Modern sign-in without a black box.
Tenant policy
Per-tenant choices for passwords, email codes, authenticators, external providers, registration, and MFA.
Passwordless access
First-party passkey enrollment and sign-in, recovery paths, and secure step-up experiences.
Operational ownership
The same EF Core schema across local SQL Server and Azure SQL, with secrets and signing keys held outside the application.
Clear separation
Authentication here.
Administration elsewhere.
CoreIdentity owns secure sign-in and token issuance. Tenant, membership, policy, and client provisioning belong to the separate administration API—keeping privileged control out of public surfaces.
coreidentity / flow
tenant resolved
policy evaluated
factor verified
token issuedTrust infrastructure