Authorization Management Plug-In, Without A Subscription

Turn Organizational Trees Into Claims.

Most authorization rules are about groups, job roles, and people. It's been done before, why build it again?

The power of AuthorizationHub is that the tenants, groups, and roles a user is related to, become identity claims as the user’s request gets processed inside the ASP.net core pipeline. Those claims are specific to your application and can be used in Authorization Policies. This neatly aligns with the security model in ASP.net core. It means you can change who can perform operations in your application by changing the user’s role and group memberships. There’s no need to make code changes and redeploy web applications.

Get Started


var builder = WebApplication.CreateBuilder(args);


// Sets up DI and needed authorization policies.
builder.Services.AddAuthorizationHub();  


// Configures AuthorizationHub to use SQL Server
builder.Services.AddSQLServerToAuthorizationHub();  


var app = builder.Build();

app.UseRouting();
app.UseAuthorization();

// Adds routes for UI and rest endpoints.
app.UseAuthorizationHubUI();  

app.Run();

Quality Software Begins With

Non Negotiables