title: How to implement Implicit Flow for Angular application using IdentityServer4
body: <p>I have been reading the Quickstart from IdentityServer4 and still have some doubts on how to implement the Implicit flow for a SPA.</p>
  
  <p>My setup is the following:</p>
  
  <p>IdentityServer4 as the token server
  An API that needs protection (using WebAPICore)
  A SPA using Angular</p>
  
  <p>My question is simple: Is the login screen where the user enters username and password the one provided by IdentityServer or is the Angular app providing this login window? If we are to use the login window provided by IdentityServer, is it best practice to just redirect to it, or should it be displayed inside an iframe in the Angular app?</p>