title: Just Single Sign on using Identity Server 3?
body: <p>We are creating 8 native applications(IOS, Android, may be windows). All these native applications have back-end api built using ASP.NET Web Api . Now I am trying to build Single Sign On using IdentityServer3 (<a href="https://github.com/IdentityServer/IdentityServer3" rel="nofollow">https://github.com/IdentityServer/IdentityServer3</a>). My users data is saved in ASP.NET Identity 2. I just need to validate username/password(no external authentication). Now my confusion is</p>
  
  <ol>
  <li>How many scopes/claims do I need or I need no scopes/claims? The web api just need to know the user-id, user-roles and user-claims saved in ASP.NET Identity tables.</li>
  <li>What scopes should my clients(native apps) request from SSO server?</li>
  <li>Should they include id_token or access_token in Authorization header during sending a request to my back-end ASP.NET web-api?</li>
  <li><p>Now my back-end ASP.NET web-api should include which scopes? I mean what should I put here,</p>
  
  <pre><code>app.UseIdentityServerBearerTokenAuthentication(new IdentityServerBearerTokenAuthenticationOptions
              {
                  Authority = "https://localhost:44333/core",
                  RequiredScopes = new[] { XXXXXX }
              });
  </code></pre></li>
  <li><p>Is https required for SSO server? and what is SigningCertificate? how is it related with https certificate?</p></li>
  </ol>