identityserver4-migration

Migrate IdentityServer4 projects to Duende IdentityServer v7 with EF Core migrations.

10|2|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/DuendeSoftware/duende-skills --skill identityserver4-migration
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: identityserver4-migration
Source: https://github.com/DuendeSoftware/duende-skills/tree/main/skills/identityserver4-migration
Command: npx skills add https://github.com/DuendeSoftware/duende-skills --skill identityserver4-migration

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This migration guide provides a structured path to move from IdentityServer4 to Duende IdentityServer v7, covering package replacements, namespace updates, EF Core and configuration migrations, .NET target upgrades, license handling, signing key migration, data protection adjustments, and UI template updates.

Core Features & Use Cases

  • Comprehensive, end-to-end guidance for upgrading IdentityServer4 projects to Duende IdentityServer v7, including NuGet replacements, API surface changes, and store migrations.
  • Stepwise Migration Path covering Stage 1 (IdentityServer4 v3/v4 to v4) and Stage 2 (v4 to Duende v7), with practical commands and considerations.
  • Licensing, issuer URI preservation, data protection configuration, key management, and UI template updates to ensure production-ready deployments.

Quick Start

Start by reviewing the Migration Analysis Tool output and following the guidance to update dependencies, namespaces, and stores accordingly.

Frequently Asked Questions about identityserver4-migration

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I migrate IdentityServer4 to Duende IdentityServer v7?

To migrate IdentityServer4 to Duende IdentityServer v7, follow a two-stage path: upgrade to v4 first, then replace NuGet packages, update namespaces, and apply EF Core configuration store migrations to reach v7.

What changes are required when upgrading to Duende IdentityServer v7?

Upgrading to Duende IdentityServer v7 requires NuGet package replacements, API surface changes, .NET target framework upgrades, license handling, signing key migration, data protection adjustments, and UI template updates.

Can I migrate IdentityServer4 directly to Duende IdentityServer v7?

Direct migration is not recommended. The structured path is a two-stage process: first upgrade IdentityServer4 v3 or v4 to v4, then migrate from v4 to Duende IdentityServer v7 to ensure tokens remain valid.

Does migrating to Duende IdentityServer v7 require upgrading to .NET 8?

Yes, migrating to Duende IdentityServer v7 enforces .NET target upgrades, including .NET 8 compatibility requirements, ensuring the modern authentication flows and updated packages function correctly.

How do I preserve issuer URI and signing keys during IdentityServer migration?

IdentityServer migration preserves issuer URI and signing keys through specific data protection configuration and key management steps, ensuring existing tokens remain valid and clients stay trusted after the upgrade.

What are the limitations when upgrading IdentityServer4 to Duende v7?

Limitations during the Duende v7 upgrade include strict compatibility requirements for issuer URI preservation, license handling, and configuration store migrations, which must be completed to maintain client trust.