Microsoft.IdentityModel.Protocols.OpenIdConnect 8.23.0

IdentityModel Extensions for .NET

Nuget

The IdentityModel Extensions for .NET library provides robust tools to enhance authentication and authorization workflows in your .NET applications. Backed by the Entra team, this library simplifies working with OpenID Connect (OIDC), OAuth2.0, and JSON Web Tokens (JWT) in .NET.

Whether you're building secure APIs, implementing token validation, or managing claims, this library is designed to handle the heavy lifting for you.

Why IdentityModel?

  • Widely Adopted: Trusted by thousands of developers to integrate OIDC and OAuth2.0 standards.
  • Secure by Design: Built with security as a priority to reduce common vulnerabilities.
  • Extensible: Easily extend or customize for advanced use cases.
  • Battle hardened: Validates 5+ trillion requests daily, and growing.

Versions

You can find the release notes for each version here. Older versions can be found here.

Version Lifecycle and Support Matrix

See Long Term Support policy for details.

Major Version Currently Supported Version Status
8.x from 8.0.1 to Nuget Active (Current) - Tied to .NET 9 (STS) & 10 (LTS) ~ Nov, 2028
7.x 7.7.1 Supported (LTS) through .NET 8 LTS lifetime Nov 10, 2026.
⚠️Versions < 7.7.1 not supported.
5.x 5.7.0 Supported (LTS), tied to the Microsoft.Owin.Security.JWT 4.2.2 lifetime.
⚠️Versions < 5.7.0 not supported.

IdentityModel 8.x

Version 8.x introduces significant updates and improvements:

  • Enhanced Performance: Optimized token validation to handle high-throughput scenarios.
  • .NET Compatibility: Fully compatible with .NET 9.

🧭LTS: Supported through .NET 9 LTS lifetime: May 12, 2026 + .NET 10 LTS (~3 years).

IdentityModel 7.x

IdentityModel 7x introduced several improvements related to serialization and consistency in the API, which provide a better user experience for developers, as well as full AOT compatibility on .NET, and considerable performance improvements compared to IdentityModel 6x.

🧭LTS: Supported through .NET 8 LTS lifetime: Nov 10, 2026.

⚡Recommendation: Move to 8.x.

IdentityModel 6.x

🧭Deprecated: Support ended with .NET 7 LTS lifetime: May 2024.

⚡Action: Move to 8.x.

IdentityModel 5.x

Not a recommended version

🧭LTS: Supported for Microsoft.Owin.Security.JWT

⚡Action: Move to 8.x.

Samples and Documentation

The scenarios supported by IdentityModel extensions for .NET are described in Scenarios. The libraries are in particular used part of ASP.NET security to validate tokens in ASP.NET Web Apps and Web APIs. To learn more about token validation, and find samples, see:

Community Help and Support

Report a bug or request a feature directly in the GitHub repo.

Have a design proposal? Please submit a design proposal before starting work on a PR to ensure it means the goals/objectives of this library and it's priorities.

We leverage Stack Overflow to work with the community on supporting Microsoft Entra and its SDKs, including this one! We highly recommend you ask your questions on Stack Overflow (we're all on there!) Also browse existing issues to see if someone has had your question before.

We recommend you use the "identityModel" tag so we can see it! Here is the latest Q&A on Stack Overflow for IdentityModel: https://stackoverflow.com/questions/tagged/identityModel

Security Reporting

See SECURITY.md

Contributing

All code is licensed under the MIT license and we triage actively on GitHub. We enthusiastically welcome contributions and feedback. See Contributing.md for guidelines, branch information, build instructions, and legalese.

License

Copyright (c) Microsoft Corporation. All rights reserved. Licensed under the MIT License (the "License");

We Value and Adhere to the Microsoft Open Source Code of Conduct

This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact opencode@microsoft.com with any additional questions or comments.

Showing the top 20 packages that depend on Microsoft.IdentityModel.Protocols.OpenIdConnect.

Packages Downloads
Microsoft.AspNetCore.Authentication.JwtBearer
ASP.NET Core middleware that enables an application to receive an OpenID Connect bearer token. This package was built from the source code at https://github.com/dotnet/aspnetcore/tree/f0cc6b11bd8f0826c63d75483578e868c8abe75e
97
Microsoft.AspNetCore.Authentication.JwtBearer
ASP.NET Core middleware that enables an application to receive an OpenID Connect bearer token. This package was built from the source code at https://github.com/dotnet/aspnetcore/tree/ada5ad97d2114250a05550cb28cc18b9cf9f8993
97
Microsoft.AspNetCore.Authentication.JwtBearer
ASP.NET Core middleware that enables an application to receive an OpenID Connect bearer token. This package was built from the source code at https://github.com/dotnet/aspnetcore/tree/e0d900c8649d185cf925b59bc12187a116e5e114
96
Microsoft.AspNetCore.Authentication.JwtBearer
ASP.NET Core middleware that enables an application to receive an OpenID Connect bearer token. This package was built from the source code at https://github.com/dotnet/aspnetcore/tree/b12b77b241f0a093d53508c3cb2084860bd5339d
95
Microsoft.AspNetCore.Authentication.JwtBearer
ASP.NET Core middleware that enables an application to receive an OpenID Connect bearer token. This package was built from the source code at https://github.com/dotnet/aspnetcore/tree/71dd6b0c87d7619668a40876d084d93db57eab41
94
Microsoft.AspNetCore.Authentication.JwtBearer
ASP.NET Core middleware that enables an application to receive an OpenID Connect bearer token. This package was built from the source code at https://github.com/dotnet/aspnetcore/tree/e71b34dbb2c0883145c658bed8814ae45f6fe15e
94
Microsoft.AspNetCore.Authentication.JwtBearer
ASP.NET Core middleware that enables an application to receive an OpenID Connect bearer token. This package was built from the source code at https://github.com/dotnet/aspnetcore/tree/abc2c7226ff616316cd1e05d76e6c36b49ce06a1
94
Microsoft.AspNetCore.Authentication.JwtBearer
ASP.NET Core middleware that enables an application to receive an OpenID Connect bearer token. This package was built from the source code at https://github.com/dotnet/aspnetcore/tree/979632683c720152cc04d0684644c40512f4e953
94
Microsoft.AspNetCore.Authentication.JwtBearer
ASP.NET Core middleware that enables an application to receive an OpenID Connect bearer token. This package was built from the source code at https://github.com/dotnet/aspnetcore/tree/f5084525411d53b81d9950b68616117750b674d4
93
Microsoft.AspNetCore.Authentication.JwtBearer
ASP.NET Core middleware that enables an application to receive an OpenID Connect bearer token. This package was built from the source code at https://github.com/dotnet/aspnetcore/tree/280c613963a1768b810d09f32c998fe4490855e9
93
Microsoft.AspNetCore.Authentication.JwtBearer
ASP.NET Core middleware that enables an application to receive an OpenID Connect bearer token. This package was built from the source code at https://github.com/dotnet/aspnetcore/tree/8df730db29a670c853e3cff67fe70eb1cf6e8af7
93
Microsoft.AspNetCore.Authentication.JwtBearer
ASP.NET Core middleware that enables an application to receive an OpenID Connect bearer token. This package was built from the source code at https://github.com/dotnet/aspnetcore/tree/e77cb01b5529c137130757859f09f892dbdd2436
93
Microsoft.AspNetCore.Authentication.JwtBearer
ASP.NET Core middleware that enables an application to receive an OpenID Connect bearer token. This package was built from the source code at https://github.com/dotnet/aspnetcore/tree/8af96e042134fb3b2f21df26dd0f32ea1c00dd37
93
Microsoft.AspNetCore.Authentication.JwtBearer
ASP.NET Core middleware that enables an application to receive an OpenID Connect bearer token. This package was built from the source code at https://github.com/dotnet/aspnetcore/tree/d4eca39c3fc1944b2c6431bf6b22036bdb176c0d
92
Microsoft.AspNetCore.Authentication.JwtBearer
ASP.NET Core middleware that enables an application to receive an OpenID Connect bearer token. This package was built from the source code at https://github.com/dotnet/aspnetcore/tree/8ad057426fa6a27cd648b05684afddab9d97d3d9
91
Microsoft.AspNetCore.Authentication.JwtBearer
ASP.NET Core middleware that enables an application to receive an OpenID Connect bearer token. This package was built from the source code at https://github.com/aspnet/AspNetCore/tree/c5f85986e62dabfc0b7f2f2a45dc7c22e8ac815f
91
Microsoft.AspNetCore.Authentication.JwtBearer
ASP.NET Core middleware that enables an application to receive an OpenID Connect bearer token. This package was built from the source code at https://github.com/dotnet/aspnetcore/tree/36f34b3a19eb7219142ab2035921d08e84c572c3
91
Microsoft.AspNetCore.Authentication.JwtBearer
ASP.NET Core middleware that enables an application to receive an OpenID Connect bearer token. This package was built from the source code at https://github.com/dotnet/dotnet/tree/c22dcd0c7a78d095a94d20e59ec0271b9924c82c
91
Microsoft.AspNetCore.Authentication.JwtBearer
ASP.NET Core middleware that enables an application to receive an OpenID Connect bearer token. This package was built from the source code at https://github.com/aspnet/AspNetCore/tree/80fec4e3edea3972e95885f5c0db6ee06072f917
91
Microsoft.AspNetCore.Authentication.JwtBearer
ASP.NET Core middleware that enables an application to receive an OpenID Connect bearer token. This package was built from the source code at https://github.com/dotnet/aspnetcore/tree/fb4b5a21ebd67b31fff4ddf5c039181da504c932
91

Version Downloads Last updated
8.23.0 7 09/19/2026
8.22.0 22 07/30/2026
8.21.0 27 07/25/2026
8.20.0 20 07/25/2026
8.19.2 19 07/16/2026
8.19.1 24 06/04/2026
8.19.0 28 06/04/2026
8.18.0 33 05/01/2026
8.17.0 40 03/28/2026
8.16.0 39 02/18/2026
8.15.0 64 11/21/2025
8.14.0 73 09/05/2025
8.13.1 65 09/05/2025
8.13.0 68 09/05/2025
8.12.1 69 09/05/2025
8.12.0 67 09/05/2025
8.11.0 65 09/05/2025
8.10.0 72 09/05/2025
8.9.0 74 09/05/2025
8.8.0 73 09/05/2025
8.7.0 76 09/05/2025
8.6.1 68 09/05/2025
8.6.0 73 09/05/2025
8.5.0 68 09/05/2025
8.4.0 70 09/05/2025
8.3.1 73 09/05/2025
8.3.0 72 09/05/2025
8.2.1 64 09/05/2025
8.2.0 67 09/05/2025
8.1.2 61 09/05/2025
8.1.1 70 09/05/2025
8.0.1 70 09/05/2025
8.0.0 75 09/05/2025
8.0.0-preview1 70 09/05/2025
7.7.3 29 07/16/2026
7.7.2 33 06/04/2026
7.7.1 63 09/05/2025
7.7.0 66 09/05/2025
7.6.3 77 09/05/2025
7.6.2 67 09/05/2025
7.6.1 73 09/05/2025
7.6.0 74 09/05/2025
7.5.2 62 09/05/2025
7.5.1 65 09/05/2025
7.5.0 64 09/05/2025
7.4.1 70 09/05/2025
7.4.0 62 09/05/2025
7.4.0-preview1 74 09/05/2025
7.3.1 65 09/05/2025
7.3.0 74 09/05/2025
7.2.0 75 09/05/2025
7.1.2 65 09/05/2025
7.0.3 66 09/05/2025
7.0.2 78 09/05/2025
7.0.1 73 09/05/2025
7.0.0 72 09/05/2025
7.0.0-preview5 74 09/05/2025
7.0.0-preview4 67 09/05/2025
7.0.0-preview3 67 09/05/2025
7.0.0-preview2 69 09/05/2025
7.0.0-preview 66 09/05/2025
6.36.0 69 09/05/2025
6.35.1 67 09/05/2025
6.35.0 66 09/05/2025
6.34.0 73 09/05/2025
6.33.0 64 09/05/2025
6.32.3 70 09/05/2025
6.32.2 66 09/05/2025
6.32.1 73 09/05/2025
6.32.0 63 09/05/2025
6.31.0 67 09/05/2025
6.30.1 69 09/05/2025
6.30.0 88 09/05/2025
6.29.0 69 09/05/2025
6.28.1 70 09/05/2025
6.27.0 65 09/05/2025
6.26.1 64 09/05/2025
6.26.0 66 09/05/2025
6.25.1 67 09/05/2025
6.25.0 69 09/05/2025
6.24.0 69 09/05/2025
6.23.1 71 09/05/2025
6.23.0 71 09/05/2025
6.22.1 73 09/05/2025
6.22.0 64 09/05/2025
6.21.0 68 09/05/2025
6.20.0 67 09/05/2025
6.19.0 64 09/05/2025
6.18.0 63 09/05/2025
6.17.0 65 09/05/2025
6.16.0 69 09/05/2025
6.15.1 64 09/05/2025
6.15.0 63 09/05/2025
6.14.1 62 09/05/2025
6.14.0 64 09/05/2025
6.13.1 70 09/05/2025
6.12.2 73 09/05/2025
6.12.1 78 09/05/2025
6.12.0 70 09/05/2025
6.11.1 66 09/05/2025
6.11.0 65 09/05/2025
6.10.2 63 09/05/2025
6.10.1 64 09/05/2025
6.10.0 67 09/05/2025
6.9.0 68 09/05/2025
6.8.0 63 09/05/2025
6.7.2-preview-10803222715 85 09/05/2025
6.7.1 70 09/05/2025
6.6.0 67 09/05/2025
6.5.1 68 09/05/2025
6.5.0 67 09/05/2025
5.7.2 5 09/26/2026
5.7.1 23 07/16/2026
5.7.0 66 09/05/2025
5.6.0 66 09/05/2025
5.5.0 69 09/05/2025
5.4.0 68 09/05/2025
5.3.0 67 09/05/2025
5.2.4 66 09/05/2025
5.2.2 76 09/05/2025
5.2.1 72 09/05/2025
2.1.5 75 09/05/2025
2.1.4 70 09/05/2025
2.1.3 64 09/05/2025
2.1.2 67 09/05/2025
2.0.0 63 09/05/2025