---
title: "Sitecore Identity Server"
slug: "sitecore-identity-server"
abstract: "Introduction to Sitecore Identity Server supported infrastructure, references, scaling, and privacy and security."
---
# Sitecore Identity Server

Sitecore introduced the Sitecore Identity Server (SIS) role with release 9.1. It is based on the IdentityServer4 framework and used to request and handle identity, grant access, and refresh tokens.

## Supported infrastructure

You can host the SIS role on:

- IIS
- [Azure App Service](https://azure.microsoft.com/en-us/services/app-service/)

Refer to the [Sitecore compatibility table](https://kb.sitecore.net/articles/087164) for compatible versions.

## Reference structure

The SIS role has its place in the Sitecore reference structure. It can be referenced by other roles, and it can also reference other roles.

### Referenced by

The SIS role is referenced by the following roles:

- [Content Management](https://doc.sitecore.com/xp/en/developers/101/platform-administration-and-architecture/content-management--cm-.html "Content Management (CM)")
- [BizFX](https://doc.sitecore.com/xp/en/developers/101/platform-administration-and-architecture/bizfx.html "BizFX")
- [EXM Dispatch](https://doc.sitecore.com/xp/en/developers/101/platform-administration-and-architecture/exm-dispatch.html "EXM Dispatch")

### References

The SIS role references the following roles:

| Storage role name | Connection string name | Port | Type | Notes |
| --- | --- | --- | --- | --- |
| [Security database](https://doc.sitecore.com/xp/en/developers/101/platform-administration-and-architecture/security-database.html) | security | 1433 | SQL | Only relevant if you are using the default authentication mechanism that requires the security database. |

## Privacy and security

The SIS role handles personal data in the following ways:

- Provides authentication services for users logging in to the BizFX, Content Management, or EXM Dispatch roles.
- Users enter user names/email address and passwords to authenticate. Does not persist data and instead relies on Sitecore’s underlying authentication mechanism.