Setting up IdentityServer is typically the first part of this puzzle; however, I feel it better illustrates how everything works when you slot in the other parts first.
There are three concepts that we need to be aware of to set up IdentityServer, and we've already briefly come across them:
- Users (who can access the resource – in our example, Lucy would be a user)
- Resources (the resource that they wish to access – our resource is our API)
- Clients (the method by which the user is trying to access the system – in our case, this is our UWP Application)
In order to function, IdentityServer needs to be given a valid list of each of these. Typically, especially for users, you would link this up to a database; however, ...