OpenIddict

Spec sheet

Product

OpenIddict is a free and open source framework for building OAuth 2.0/OpenID Connect clients and servers in .NET.Read 29 Sep 2026 · documentation.openiddict.com

Platforms

The client stack supports Windows, macOS, Linux, Android, and iOS applications.Read 29 Sep 2026 · openiddict.com

Integrations

OpenIddict lists ASP.NET Core, ASP.NET, Entity Framework, MongoDB, and Quartz.NET among its integration areas.Read 29 Sep 2026 · documentation.openiddict.com

Support

Dedicated support is available to regular contributors, sponsors, and companies with a custom support contract, and generally covers only the latest stable version.Read 29 Sep 2026 · openiddict.com

License

OpenIddict is released under the Apache 2.0 license and is free to use in commercial projects.Read 29 Sep 2026 · openiddict.com

Founded

2015Read 28 Sep 2026 · openiddict.com

Authentication

OpenIddict focuses on OAuth 2.0/OpenID Connect protocol handling and leaves user authentication to the implementer; ASP.NET Core Identity is optional.Read 29 Sep 2026 · documentation.openiddict.com

Customization

Its event handlers can be removed, reordered, or replaced with custom handlers.Read 29 Sep 2026 · documentation.openiddict.com

Getting started

The documentation recommends ABP Framework and Orchard Core for turnkey OpenID Connect server implementations that support OpenIddict out of the box.Read 29 Sep 2026 · documentation.openiddict.com

Persistence

Officially supported persistence integrations include Entity Framework 6, Entity Framework Core, and MongoDB; custom stores can support other providers.Read 29 Sep 2026 · documentation.openiddict.com

Project history

The project was born in late 2015 and added its OAuth 2.0/OpenID Connect client stack in 2022.Read 29 Sep 2026 · documentation.openiddict.com

Security configuration

The configuration documentation lists encryption and signing credentials, mutual TLS authentication, PKCE, and pushed authorization requests.Read 29 Sep 2026 · documentation.openiddict.com

Stacks

It provides client, server, and token validation stacks that can be used together or independently.Read 29 Sep 2026 · documentation.openiddict.com

Stateless mode

Degraded mode can disable features that depend on OpenIddict.Core, including client and redirect URI validation, reference tokens, and token revocation.Read 29 Sep 2026 · documentation.openiddict.com

Support exceptions

The support page describes extended support for previous versions based on sponsorship tier and lists an exception for ABP Framework users.Read 29 Sep 2026 · openiddict.com

Web hosting

The server and validation stacks can be used in ASP.NET Core 2.1+ or ASP.NET 4.6.1+ applications.Read 29 Sep 2026 · openiddict.com

Plans and prices

Every OpenIddict plan and price →

Where Specifiction places it

• OAuth Server Software#24 of 327.7