Identityserver4.admin: I have one question regarding Login Ui

[sudheeshv]

Why are we using mvc razor page for login ? why it's not separating like API and Angular or react UI ? Please help me to understand and what is the security breach ?

[skoruba]

If you want to use IdentityServer4 - you need use server-side login screen, because of cookies (for example for SSO) and everything stuff around that.

[sudheeshv]

If you want to use IdentityServer4 - you need use server-side login screen, because of cookies (for example for SSO) and everything stuff around that.

Then how the same will work for Mobile Application ? If i want to use same SSO Login for Mobile application then how does it will work ? May be i am asking some wrong questions please help me to understand the scenario if i am wrong

[fudgeboy2000]

If you want to use IdentityServer4 - you need use server-side login screen, because of cookies (for example for SSO) and everything stuff around that.

Then how the same will work for Mobile Application ? If i want to use same SSO Login for Mobile application then how does it will work ? May be i am asking some wrong questions please help me to understand the scenario if i am wrong

Not sure if this is the most common way, but in our Xamarin app we use a webview control to visualise our IdentityServer login page to handle the auth flow/token exchange.

[skoruba]

Look at this sample:
https://github.com/IdentityModel/IdentityModel.OidcClient.Samples/tree/master/XamarinForms

[skoruba]

This video describes - how to use IS4 with native clients like mobile apps - including solving login screen etc. https://vimeo.com/205451987
Thanks

[Munde]

Also you may look at this sample.
https://sinclairinat0r.com/2018/12/09/secure-data-access-with-identityserver4-and-xamarin-forms

[sudheeshv]

Thank you @skoruba @Munde