Identity Server has a couple of pages that authenticated users can access and which contain information about the user and Identity Server that some security models deem sensitive. If you want to block user access to these pages, see the following sections: