Small, Easy, and Fast As Hell.
Authorization Management Plugin for ASP.NET Core
AuthorizationHub adds a user interface to your existing ASP.net application, so you can manage users, groups, and roles. More importantly, it allows you to build an organizational tree that can be transformed into claims and used in authorization policies.
Authorization Management Plug-In Built For ASP.NET Core.
Most authorization rules are about groups, job roles, and people. It's been done before, why build it again?
Identity Provider Agnostic
Open solution designed to work with any and all identity providers
Built For Ease of Administering
Changes can be scheduled before they need to take effect.
Flexible
Nested groups and users can belong to many tenants, groups and roles.
Integration
REST API to empower your developers to update the database seamlessly.
Turn Organizational Trees Into Claims.
The power of AuthorizationHub is that the tenants, groups, and roles a user is related to, become identity claims as the user’s request gets processed inside the ASP.net core pipeline. Those claims are specific to your application and can be used in Authorization Policies. This neatly aligns with the security model in ASP.net core. It means you can change who can perform operations in your application by changing the user’s role and group memberships. There’s no need to make code changes and redeploy web applications.
01
Green Field or Brown
AuthorizationHub is an addin for your existing ASP.net application to implement a modern, effective, and efficient authorization solution. It’s not software as a service, you don’t need a local server, and you could run it in the cloud. It’s yours. You get to decide.
02
No External Service
Authorization needs to be fast, so AuthorizationHub operates inside the ASP.net pipeline and adds claims to the user.
03
Database Options
SQLite, MS SQL Server, and Postgres. These options give you the ability to choose a database provider that fits with your existing databases, and the performance profile of your application. We never take your data.
04
Why Create Another UI
We get it. Your team has better things to do. We made a UI to help you manage users, groups, roles, and tenants. Just pick a route in your own web application, we’ll provide the UI, and stay out of your way.
05
We Love Application Admins
Managing users, groups, and roles for an application can be a giant time sink, and it should be as easy as possible. AuthorizationHub supports nested groups and allows users to be part of multiple tenants. Even better, changes to users can be scheduled before they need to take effect. That means that application administrators will spend less time doing data entry and do it when they want to.
Standard
- Unlimited Administrators
- 1 Application
- Free Updates
- Single Tenant
- Less Than 1000 Users
Professional
- Unlimited Administrators
- 1 Application
- Free Updates
- Single Tenant
- Unlimited Users
Enterprise
- Unlimited Administrators
- 1 Application
- Free Updates
- Multiple Tenants
- Unlimited Users
Frequently Asked Questions
What is AuthorizationHub?
AuthorizationHub is a self-hosted authorization management plugin for ASP.NET Core. It turns your organizational structure — tenants, groups, and roles — into identity claims you can use in standard ASP.NET Core authorization policies. It is not SaaS; it runs inside your application against your own database.
How do I add authorization management to an existing ASP.NET Core app?
Three steps: call AddAuthorizationHub() in dependency injection, register a database backend such as AddSQLServerToAuthorizationHub(), and enable the management UI and API with UseAuthorizationHubUI(). It works with both new and existing applications.
Which databases does AuthorizationHub support?
AuthorizationHub supports SQL Server, PostgreSQL, and SQLite.
Does it work with my identity provider, such as Entra ID, Auth0, or ASP.NET Identity?
Yes. AuthorizationHub is identity-provider agnostic. It handles authorization, not authentication, so it layers on top of whatever you already use to sign users in. A user’s relationships become claims as the request flows through the ASP.NET Core pipeline.
How do I change permissions without redeploying my application?
Change a user’s group or role memberships in the management UI or through the REST API. Those changes become claims on the user’s next request — no code changes and no redeploy. Changes can also be scheduled to take effect at a future time.
Is AuthorizationHub SaaS or self-hosted?
Self-hosted. AuthorizationHub runs inside your application and stores data in your own database, so nothing leaves your infrastructure.
What are tenants, groups, and roles in AuthorizationHub?
Multi-tenancy lets a user belong to multiple organizations, groups support nested hierarchies, and roles are assigned within groups and tenants. Together they form the organizational tree that AuthorizationHub transforms into identity claims.
