Explore the advanced security features of ASP.NET Core 2.2 and 3.0 for building secure web applications and APIs in this comprehensive conference talk. Gain insights into Microsoft's significant investments in standards-based authentication, single sign-on, and API security, with a focus on the integration of the popular open-source project IdentityServer4 into project templates. Delve into an overview of various security features in ASP.NET Core, with particular emphasis on API security scenarios enabled by IdentityServer. Learn how to leverage these tools and techniques to enhance the security of your web applications and APIs, ensuring robust protection against potential threats and vulnerabilities.