End of IdentityServer3 Maintenance

Yesterday we made the decision to stop development and maintenance of IdentityServer3. This has a couple of reasons:

  • IdentityServer4 is the better OpenID Connect and OAuth 2 implementation in every aspect
  • ASP.NET Core 2 is now a mature platform
  • There is only that much time you can spend on OSS development and issue tracker support, so we decided to focus on current projects which are IdentityServer4, IdentityModel2 and oidc-client.js

This also applies to answering questions on the issue tracker – we recommend you either use StackOverflow for free support, or use our commercial support options.

Security vulnerabilities will be fixed ASAP of course. Please disclose them responsibly.

PS. If you are a customer or have an existing support contract, we will of course continue supporting you. If you want to start a new support contract for your IdentityServer3 deployment, please let us know.

This entry was posted in IdentityServer, Uncategorized. Bookmark the permalink.

15 Responses to End of IdentityServer3 Maintenance

  1. Hi Dominick,
    Do you have any documentation on upgrading IdentityServer 3 to IdentityServer 4?
    Many thanks

  2. Daniel says:

    Hi Dominik. I was trying to upgrade IS3 to IS4 in our Identity service project, but I’ve found that the latest version of IS4 does not support .NET 4.5.2. Is that correct?

    This is the error I’m getting:
    Could not install package ‘IdentityServer4 2.0.2’. You are trying to install this package into a project that targets ‘.NETFramework,Version=v4.5.2’, but the package does not contain any assembly references or content files that are compatible with that framework. For more information, contact the package author.

    Should I use IS4 1.5.2? From nuget feed, I can see It is the newest version supporting .NET 4.5.2.


  3. adz21c says:

    Hi Dominick,
    How long do you plan to support security vulnerabilities in IdentityServer 3?


  4. Andy says:

    Hi Dominick,

    As it’s now 2019, do you still plan to support security fixes for IdentityServer3 for the foreseeable future, or has this changed?

    Best regards

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s