Direct integration with external provider

[shessane]

Hello,

We try to use an external provider for user authentication. We can't use federation as we can't expose the OpenIdDict well-known and the MVC pages. We have a hardened architecture that forces segregation between serving html pages and exposing REST APIs through an APIM Gateway.

We are making a POC that uses the community edition, but we plan to take the commercial edition for different projects.

All our applications uses a central identity provider based on IdentityServer that is hosted separately. We need to connect abp starter template to this external authority. The user is redirected to the authority for authentication, and then is redirected to the abp application (single tenant app), that should create an abp user locally with the default role. We succeed to do so, we write a custom callback that creates the user after a success. We are looking for advice.

In this comment, @hikalkan talks about an option where we can drop completely the auth server (because it's removable module), and use directly an external auth server. He talks about some guides to do that. This is exactly the scenario that suits us. We want also to know if this scenario will be supported in the long term.

Any help or advice is welcome.