identityserver-deployment

Production deployment behind a reverse proxy requires configuring ASP.NET Core ForwardedHeaders to ensure correct issuer URLs and cookies during TLS termination. This Skill provides the necessary proxy configuration guidance to maintain proper endpoint resolution.

Multi-instance deployments fail without durable Data Protection key storage and shared signing keys. This Skill enforces practical requirements for persistent key storage across instances to prevent token validation failures and cookie authentication breaks.

Production readiness requires health checks for Discovery and JWKS endpoints to validate endpoint availability. This Skill provides health check configurations to monitor these critical IdentityServer endpoints and confirm deployment readiness.

IdentityServer supports OpenTelemetry integration and logging setup to enable end-to-end observability in production. This Skill offers configurations for distributed tracing and structured logging across ASP.NET Core ecosystems to monitor authentication flows.

Distributed caching for multi-instance deployments improves performance and consistency across instances. This Skill provides caching recommendations to synchronize state across multiple IdentityServer nodes and reduce database load in production.

Common IdentityServer production deployment pitfalls include missing ForwardedHeaders, non-durable data protection keys, absent health checks, and unconfigured distributed caching. This Skill includes a production readiness checklist to identify and avoid these misconfigurations.