---
title: "Sitecore Identity Server"
slug: "sitecore-identity-server"
abstract: "Introduction to Sitecore Identity Server supported infrastructure, references, scaling, and privacy and security."
---
# Sitecore Identity Server

The Sitecore Identity Server (SIS) role is based on the Duende IdentityServer framework and used to request and handle identity, grant access, and refresh tokens.

## Supported infrastructure

You can host the SIS role on:

- IIS
- [Azure App Service](https://azure.microsoft.com/en-us/services/app-service/)

Refer to the [Sitecore compatibility table](https://kb.sitecore.net/articles/087164) for compatible versions.

## Reference structure

The SIS role has its place in the Sitecore reference structure. It can be referenced by other roles, and it can also reference other roles.

### Referenced by

The SIS role is referenced by the following roles:

- [Content Management](https://doc.sitecore.com/xp/en/developers/104/platform-administration-and-architecture/content-management--cm-.html "Content Management (CM)")
- [EXM Dispatch](https://doc.sitecore.com/xp/en/developers/104/platform-administration-and-architecture/exm-dispatch.html "EXM Dispatch")

### References

The SIS role references the following roles:

| Storage role name | Connection string name | Port | Type | Notes |
| --- | --- | --- | --- | --- |
| [Security database](https://doc.sitecore.com/xp/en/developers/104/platform-administration-and-architecture/security-database.html) | security | 1433 | SQL | Only relevant if you are using the default authentication mechanism that requires the security database. |

## Privacy and security

The SIS role handles personal data in the following ways:

- Provides authentication services for users logging in to the Content Management, or EXM Dispatch roles.
- Users enter user names/email address and passwords to authenticate. Does not persist data and instead relies on Sitecore’s underlying authentication mechanism.