identityserver-deployment

What problem does it solve?

Deploying Duende IdentityServer to production often suffers from misconfigurations around proxies, data protection keys, health checks, caching, observability, and multi-instance deployments. This guide provides a concise, production-focused set of practices and configurations to address these challenges.

Core Features & Use Cases

• Reverse proxy and TLS termination guidance to ensure correct issuer URLs and cookies in production environments.
• Durable Data Protection key storage and shared signing keys to support multi-instance deployments.
• Health checks for Discovery and JWKS endpoints to validate production readiness.
• Distributed caching recommendations to improve performance and consistency across instances.
• OpenTelemetry integration and logging setup to enable end-to-end observability in production.
• Production readiness checklist and common deployment pitfalls to avoid.

Quick Start

Follow the deployment guide to configure a production-ready IdentityServer deployment behind a reverse proxy.