Design security for ASP.NET Core web application with self managed, centralized Identity Server 4 authorization server If you want find more about Identity Server 4, check this article,
http://hansamaligamage.blogspot.com/2017/02/secure-your-netcore-web-applications.html