--- title: Introduction to Identity on ASP.NET Core author: rick-anderson description: Using Identity with an ASP.NET Core app keywords: ASP.NET Core,Identity,authorization,security ms.author: riande manager: wpickett ms.date: 07/07/2017 ms.topic: article ms.assetid: cf119f21-1a2b-49a2-b052-547ccb66ee83 ms.technology: aspnet ms.prod: asp.net-core uid: security/authentication/identity --- # Introduction to Identity on ASP.NET Core By [Pranav Rastogi](https://github.com/rustd), [Rick Anderson](https://twitter.com/RickAndMSFT), [Tom Dykstra](https://github.com/tdykstra), Jon Galloway, [Erik Reitan](https://github.com/Erikre), and [Steve Smith](https://ardalis.com/) ASP.NET Core Identity is a membership system which allows you to add login functionality to your application. Users can create an account and login with a user name and password or they can use an external login provider such as Facebook, Google, Microsoft Account, Twitter or others. You can configure ASP.NET Core Identity to use a SQL Server database to store user names, passwords, and profile data. Alternatively, you can use your own persistent store, for example Azure Table Storage. This document contains instructions for Visual Studio and for using the CLI. ## Overview of Identity In this topic, you'll learn how to use ASP.NET Core Identity to add functionality to register, log in, and log out a user. For more detailed instructions about creating apps using ASP.NET Core Identity, see the Next Steps section at the end of this article. 1. Create an ASP.NET Core Web Application project with Individual User Accounts. # [Visual Studio](#tab/visual-studio) In Visual Studio, select **File** -> **New** -> **Project**. Select the **ASP.NET Web Application** from the **New Project** dialog box. Selecting an ASP.NET Core **Web Application** with **Individual User Accounts** as the authentication method. Note: You must select **Individual User Accounts**. ![New Project dialog](identity/_static/01-mvc.png) # [.NET Core CLI](#tab/netcore-cli) If using the .NET Core CLI, create the new project using ``dotnet new mvc --auth Individual``. This will create a new project with the same Identity template code Visual Studio creates. The created project contains the `Microsoft.AspNetCore.Identity.EntityFrameworkCore` package, which will persist the Identity data and schema to SQL Server using [Entity Framework Core](https://docs.microsoft.com/ef/). --- 2. Configure Identity services and add middleware in `Startup`. The Identity services are added to the application in the `ConfigureServices` method in the `Startup` class: # [ASP.NET Core 2.x](#tab/aspnetcore2x) [!code-csharp[Main](identity/sample/src/ASPNETv2-IdentityDemo/Startup.cs?name=snippet_configureservices&highlight=7-9,11-28,30-39)] These services are made available to the application through [dependency injection](xref:fundamentals/dependency-injection). Identity is enabled for the application by calling `UseAuthentication` in the `Configure` method. `UseAuthentication` adds authentication [middleware](xref:fundamentals/middleware) to the request pipeline. [!code-csharp[Main](identity/sample/src/ASPNETv2-IdentityDemo/Startup.cs?name=snippet_configure&highlight=17)] # [ASP.NET Core 1.x](#tab/aspnetcore1x) [!code-csharp[Main](identity/sample/src/ASPNET-IdentityDemo/Startup.cs?name=snippet_configureservices&highlight=7-9,13-34)] These services are made available to the application through [dependency injection](xref:fundamentals/dependency-injection). Identity is enabled for the application by calling `UseIdentity` in the `Configure` method. `UseIdentity` adds cookie-based authentication [middleware](xref:fundamentals/middleware) to the request pipeline. [!code-csharp[Main](identity/sample/src/ASPNET-IdentityDemo/Startup.cs?name=snippet_configure&highlight=21)] --- For more information about the application start up process, see [Application Startup](xref:fundamentals/startup). 3. Create a user. Launch the application and then click on the **Register** link. If this is the first time you're performing this action, you may be required to run migrations. The application prompts you to **Apply Migrations**: ![Apply Migrations Web Page](identity/_static/apply-migrations.png) Alternately, you can test using ASP.NET Core Identity with your app without a persistent database by using an in-memory database. To use an in-memory database, add the ``Microsoft.EntityFrameworkCore.InMemory`` package to your app and modify your app's call to ``AddDbContext`` in ``ConfigureServices`` as follows: ```csharp services.AddDbContext(options => options.UseInMemoryDatabase(Guid.NewGuid().ToString())); ``` When the user clicks the **Register** link, the ``Register`` action is invoked on ``AccountController``. The ``Register`` action creates the user by calling `CreateAsync` on the `_userManager` object (provided to ``AccountController`` by dependency injection): [!code-csharp[Main](identity/sample/src/ASPNET-IdentityDemo/Controllers/AccountController.cs?name=snippet_register&highlight=11)] If the user was created successfully, the user is logged in by the call to ``_signInManager.SignInAsync``. **Note:** See [account confirmation](xref:security/authentication/accconfirm#prevent-login-at-registration) for steps to prevent immediate login at registration. 4. Log in. Users can sign in by clicking the **Log in** link at the top of the site, or they may be navigated to the Login page if they attempt to access a part of the site that requires authorization. When the user submits the form on the Login page, the ``AccountController`` ``Login`` action is called. [!code-csharp[Main](identity/sample/src/ASPNET-IdentityDemo/Controllers/AccountController.cs?name=snippet_login&highlight=13-14)] The ``Login`` action calls ``PasswordSignInAsync`` on the ``_signInManager`` object (provided to ``AccountController`` by dependency injection). The base ``Controller`` class exposes a ``User`` property that you can access from controller methods. For instance, you can enumerate `User.Claims` and make authorization decisions. For more information, see [Authorization](xref:security/authorization/index). 5. Log out. Clicking the **Log out** link calls the `LogOut` action. [!code-csharp[Main](identity/sample/src/ASPNET-IdentityDemo/Controllers/AccountController.cs?name=snippet_logout&highlight=7)] The preceding code above calls the `_signInManager.SignOutAsync` method. The `SignOutAsync` method clears the user's claims stored in a cookie. 6. Configuration. Identity has some default behaviors that you can override in your application's startup class. You do not need to configure ``IdentityOptions`` if you are using the default behaviors. # [ASP.NET Core 2.x](#tab/aspnetcore2x) [!code-csharp[Main](identity/sample/src/ASPNETv2-IdentityDemo/Startup.cs?name=snippet_configureservices&highlight=7-9,11-28,30-39)] # [ASP.NET Core 1.x](#tab/aspnetcore1x) [!code-csharp[Main](identity/sample/src/ASPNET-IdentityDemo/Startup.cs?name=snippet_configureservices&highlight=13-34)] --- For more information about how to configure Identity, see [Configure Identity](xref:security/authentication/identity-configuration). You also can configure the data type of the primary key, see [Configure Identity primary keys data type](xref:security/authentication/identity-primary-key-configuration). 7. View the database. If your app is using a SQL Server database (the default on Windows and for Visual Studio users), you can view the database the app created. You can use **SQL Server Management Studio**. Alternatively, from Visual Studio, select **View** -> **SQL Server Object Explorer**. Connect to **(localdb)\MSSQLLocalDB**. The database with a name matching **aspnet-<*name of your project*>-<*date string*>** is displayed. ![Contextual menu on AspNetUsers database table](identity/_static/04-db.png) Expand the database and its **Tables**, then right-click the **dbo.AspNetUsers** table and select **View Data**. ## Identity Components The primary reference assembly for the Identity system is `Microsoft.AspNetCore.Identity`. This package contains the core set of interfaces for ASP.NET Core Identity, and is included by `Microsoft.AspNetCore.Identity.EntityFrameworkCore`. These dependencies are needed to use the Identity system in ASP.NET Core applications: * `Microsoft.AspNetCore.Identity.EntityFrameworkCore` - Contains the required types to use Identity with Entity Framework Core. * `Microsoft.EntityFrameworkCore.SqlServer` - Entity Framework Core is Microsoft's recommended data access technology for relational databases like SQL Server. For testing, you can use `Microsoft.EntityFrameworkCore.InMemory`. * `Microsoft.AspNetCore.Authentication.Cookies` - Middleware that enables an app to use cookie-based authentication. ## Migrating to ASP.NET Core Identity For additional information and guidance on migrating your existing Identity store see [Migrating Authentication and Identity](xref:migration/identity). ## Next Steps * [Migrating Authentication and Identity](xref:migration/identity) * [Account Confirmation and Password Recovery](xref:security/authentication/accconfirm) * [Two-factor authentication with SMS](xref:security/authentication/2fa) * [Enabling authentication using Facebook, Google and other external providers](xref:security/authentication/social/index)