# AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet

IdentityModel extensions for .NET

Repository: https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet
Canonical: https://ross.abutalabs.com/products/azure-activedirectory-identitymodel-extensions-for-dotnet
Language: C#
License: MIT
License Family: permissive
Last push: 2026-09-01T01:58:23+00:00

## Health v2 (maintenance only)
Score: 98/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 100, release rhythm 95, longevity 100
- inputs: {"age_days": 4563, "days_push": 2, "days_rel": 35, "gap_med": 13.0, "n_releases_24m": 33}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1157, forks 474 (observed 2026-09-01T02:13:54.257629+00:00)

## What it is
Microsoft's IdentityModel extensions for .NET, a library for working with OpenID Connect, OAuth 2.0, and JSON Web Tokens (JWT) in .NET applications. It handles token creation, validation, and claims management, and is maintained by the Microsoft Entra team.

## Use cases
- validate jwt tokens in an asp.net core api
- implement oauth2 bearer token authentication in .net
- read and verify claims from an openid connect id token
- issue signed  web tokens from a .net service
- secure a web api with microsoft entra id tokens
- handle token validation at high throughput

## When to choose
- you are building .NET apps or APIs that consume or validate OIDC/OAuth2/JWT tokens
- you integrate with Microsoft Entra ID (Azure AD) or other standards-compliant identity providers
- you need a battle-tested, security-focused token validation library

## When to avoid
- you need full authentication UI flows or middleware orchestration rather than token handling (use Microsoft.Identity.Web or ASP.NET Core auth middleware on top)
- your project is not on the .NET platform
- you need a lightweight custom JWT encoder with no OIDC/OAuth semantics

## Facets
- artifact type: library
- maturity: active
- function: auth, authorization, serialization, security
- domain: security, developer-tools, apis, backend
- platform: dotnet, cross-platform
- tags: jwt, openid-connect, oauth2, token-validation, microsoft-entra, claims-based-identity

## Member repositories
- AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet (main) score 98

## Provenance
- Observed fields: from GitHub, fetched 2026-09-01T02:13:54.257629+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:31:59.770834+00:00, confidence not recorded.
  - readme: https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet (fetched 2026-09-01T02:13:54.257629+00:00, sha 1bb2a02c7c01)
- Data as of 2026-08-30T08:39:29.467469+00:00.