Duende Software
Official@duendesoftware · United States of America
We help companies using .NET to build identity and access control solutions for modern applications
Agent Skills by Duende Software
Showing 22 vetted skills indexed across 1 GitHub repositories.
DuendeSoftwareidentityserver-configuration
Configure Duende IdentityServer clients, resources, scopes, and signing credentials.
DuendeSoftwareidentityserver-sessions-providers
Configure server-side sessions, dynamic identity providers, and CIBA for Duende IdentityServer.
DuendeSoftwareidentityserver-token-security
Configures IdentityServer for DPoP, mTLS, PAR, JAR, and FAPI 2.0 token binding.
DuendeSoftwareidentityserver-token-lifecycle
Manage token types, refresh token rotation, and RFC 8693 token exchange in Duende IdentityServer.
DuendeSoftwareidentityserver-aspire
Coordinate IdentityServer startup readiness within Aspire AppHost dependency graphs.
DuendeSoftwareidentityserver-deployment
Configure Duende IdentityServer deployments behind reverse proxies with health checks and OpenTelemetry.
DuendeSoftwareidentity-testing-patterns
Configure IdentityServer authentication and token workflow tests with WebApplicationFactory.
DuendeSoftwareidentityserver-key-management
Manage signing keys for Duende IdentityServer across automatic and static configurations.
DuendeSoftwareoauth-oidc-protocols
Implement and debug OAuth 2.0 and OpenID Connect flows with PKCE, JWKS, and token management.
DuendeSoftwareidentityserver-dcr
Configure a protected Dynamic Client Registration endpoint for Duende IdentityServer.
DuendeSoftwareidentityserver-api-protection
Validate IdentityServer JWT and reference tokens with scope-based authorization.
DuendeSoftwareidentityserver-ui-flows
Build login, consent, logout, and error UI flows for Duende IdentityServer.
DuendeSoftwareidentity-security-hardening
Consolidate security hardening guidance for Duende IdentityServer deployments.
DuendeSoftwareduende-bff
Manage server-side sessions, tokens, and CSRF enforcement for SPA backends.
DuendeSoftwareaspnetcore-authorization
Configure policy-based and scope-based authorization in ASP.NET Core applications.
DuendeSoftwareidentityserver-hosting-setup
Configure Duende IdentityServer hosting in ASP.NET Core with DI and middleware.
DuendeSoftwaretoken-management
Manage and refresh access tokens for .NET applications using Duende.AccessTokenManagement.
DuendeSoftwareaspnetcore-authentication
Configure cookies, OpenID Connect, and JWT Bearer authentication in ASP.NET Core.
DuendeSoftwareidentityserver-saml
Configure Duende IdentityServer as a SAML 2.0 Identity Provider with SP integration.
DuendeSoftwareidentityserver4-migration
Migrate IdentityServer4 projects to Duende IdentityServer v7 with EF Core migrations.
DuendeSoftwareclaims-authorization
Load and filter user claims during token issuance according to requested scopes.
DuendeSoftwareidentityserver-stores
Configure Duende IdentityServer EF Core stores for configuration and operational data.
Frequently Asked Questions About Duende Software
FAQPage SchemaWhat specific security protocols does Duende support for token binding?▼
Duende supports advanced security standards including DPoP, mTLS, PAR, JAR, and FAPI 2.0. These features ensure robust token binding and enhanced protection against interception or replay attacks within modern distributed environments.
Which developers should use these identity solutions?▼
These solutions are designed for .NET engineers and security architects building enterprise applications. They are ideal for teams requiring centralized authentication, claims-based authorization, and strict compliance with OAuth 2.0 and OpenID Connect standards.
What are the prerequisites for implementing Duende IdentityServer?▼
Implementation requires an existing ASP.NET Core environment and familiarity with dependency injection and middleware configuration. Developers must also manage EF Core stores for operational data and configure signing credentials for token issuance.
Is Duende IdentityServer open-source or commercial?▼
Duende IdentityServer is a commercial product requiring a license for production use. It provides enterprise-grade support and features for identity management that exceed the capabilities of basic open-source alternatives.