A practical guide to enforcing fine-grained access control on #dotnet 10 Minimal API endpoints using scope claims in JWTs issued by Duende IdentityServer. ➡️ duende.link/29spt26
Stu Frankish
@stufrankish.dev
Just your run of the mill, quirky IT guy. I write software for work & for fun and I love my cats 🙂 Adopt, Adapt, Improve.
Learn how Duende #IdentityServer v8 splits protocol support into Core and Extended tiers, and discover which license level your project actually needs based on your authentication requirements. Read more 👇 duende.link/97srwgb #dotnet #aspnetcore
Core vs Extended Protocols in Duende IdentityServer v8: What You Get and When You Need More
Learn how Duende IdentityServer v8 splits protocol support into Core and Extended tiers, and discover which license level your project actually needs based on your authentication requirements.
duende.link
The future of .NET identity is here. 🚀 Hear from the architects shaping the ecosystem. The Duende leadership team dives into ISv8, modular add-ons, and our commitment to expanding identity infrastructure. 📺 Watch the full walkthrough: www.youtube.com/watch?v=qloC...
Spring Launch Event: The Next Era of Duende Identity Infrastructure
This isn't a point release. This is a new chapter. On June 2, Duende ships the most significant release in the company's history: IdentityServer v8 - a .NET 10-exclusive major release, five modular…
youtube.com
Stop hand-rolling bespoke user systems. 🏗️ Our new User Management add-on brings fully supported user storage, auth, and lifecycle management directly to your deployment. Passwords, MFA, and passkeys are built-in, not bolted on. Read the blog: duendesoftware.com/blog/2026060...
Duende Spring Launch '26: Identity Infrastructure That Expands With You
Duende Software is a company that builds industry-leading security software.
duendesoftware.com
The future of .NET identity is here. 🚀 Hear from the architects shaping the ecosystem. The Duende leadership team dives into ISv8, modular add-ons, and our commitment to expanding identity infrastructure. 📺 Watch the full walkthrough: www.youtube.com/watch?v=qloC...
Duende IdentityServer
Duende Software is a company that builds industry-leading security software.
duendesoftware.com
Check out our latest video on getting started with Duende User Management! We demo a full flow using OTP, .NET Aspire, and Mailpit for testing. Watch now: www.youtube.com/watch?v=8VtP... #DotNet #IdentityServer #aspnetcore #Passwordless
Getting Started with Duende User Management
In this video, we walk through how to get started with Duende User Management, a first-party feature of Duende IdentityServer. This tutorial demonstrates how to implement a passwordless…
youtube.com
We go LIVE in one hour! 🚨 Join us for the Spring Launch Event to see IdentityServer v8, 5 new modular add-ons, and the next era of Duende Identity Infrastructure. ⏰ 10:00 EDT / 16:00 CEST / 14:00 UTC Be there: www.youtube.com/watch?v=qloC...
Spring Launch Event: The Next Era of Duende Identity Infrastructure
This isn't a point release. This is a new chapter. On June 2, Duende ships the most significant release in the company's history: IdentityServer v8 - a .NET 10-exclusive major release, five modular…
youtube.com
Want to know where .NET identity is heading? Ask the team building it. 🏗️ We’re bringing the whole crew, Brock, Dom, Tyler, Damian, Elise, and Khalid, together for a live walkthrough of IdentityServer v8, the new add-ons, and our platform roadmap. 📅 June 2 | 🔗 duendesoftware.com/webinars/the...
The next era of Duende Identity Infrastructure
Learn more about the Next Era of Duende Identity Infrastructure including IdentityServer v8, modular add-ons, a new infrastructure foundation, and more.
duendesoftware.com
What’s next for .NET identity? A purpose-built management plane and storage abstraction. 🏗️ We’re unveiling a new additive infrastructure layer that powers User Management today and our capabilities of tomorrow. Learn more on June 2: duendesoftware.com/webinars/the...
The next era of Duende Identity Infrastructure
Learn more about the Next Era of Duende Identity Infrastructure including IdentityServer v8, modular add-ons, a new infrastructure foundation, and more.
duendesoftware.com
Tomorrow! Join our livestream on March 3rd. Stop relying on manual checks. We’re showing you how to automate your security testing to ensure your API only accepts your trusted tokens. 🔗 March 3rd. Be there: duende.link/lsjwt26b #OAuth2 #JWT #DotNet
Livestream: Are your access tokens really secure?
Are your APIs vulnerable? Explore JWT pitfalls, learn to prevent exploits, and compare JWTs vs. opaque tokens in this expert-led session.
duende.link
The Duende Product Insiders program is a private technical channel for partnership. Discuss Identity Strategy, Architecture, and Deployment Nuances directly with Duende experts. Stop guessing, start collaborating. 🙌 duende.link/discord
Join the Duende Insiders Discord Server!
Check out the Duende Insiders community on Discord – hang out with 42 other members and enjoy free voice and text chat.
duende.link
Heads up, #dotnet developers! 🚀 .NET 10 is a great time to upgrade your application and its dependencies. In this post, we look at key .NET 10 breaking changes you need to know about for a smooth upgrade. 👉 duende.link/89qegla #aspnetcore
Duende Software - Identity and Access Management for .NET
We help companies using .NET to build identity and access control solutions for modern applications.
duende.link
Adding .NET 10 Passkey Support to Duende IdentityServer 👉 duende.link/berqe86 Learn how to add #dotnet 10 passkey support to a non-Blazor project such as MVC or Razor Pages. #security #aspnetcore #identity #webauthn
Duende Software - Identity and Access Management for .NET
We help companies using .NET to build identity and access control solutions for modern applications.
duende.link
Let's look into a crucial "defense-in-depth" mechanism: SameSite cookies. Learn how this powerful browser flag adds extra protection against Cross-Site Request Forgery (CSRF) attacks. Strengthen your #aspnetcore web applications! youtu.be/goQlKiynWXU #dotnet
SameSite Cookies 🍪
Welcome back to Duende Software's web security series! In this video, we're looking into a crucial "defense-in-depth" mechanism: SameSite cookies. Learn how this powerful browser flag can add an…
youtu.be
Stop struggling with diverse identity providers. 🛑 A Federation Gateway, such as Duende IdentityServer, is the key to: 🔑 Centralized Compliance ⚡️ Operational Agility 👤 Unified User Login duende.link/8aefizq #IdentityOrchestration #SSO #Security #dotnet
Building a Federation Gateway with Duende IdentityServer: Strategies and Considerations for Identity Orchestration
Learn the core benefits of building a federation gateway that brings together Entra ID, Okta, SAML, Auth0 though a centralized authentication provider like DUende IdentityServer.
duende.link
📢 .NET 10 is here, but what about security? 🤔 In this post, we explore missing security features in #dotnet 10 and discover how Duende Software fills the gaps for Token Management, DPoP, Blazor, and OAuth 2.0 Introspection! duende.link/q13yifc
Duende Software - Identity and Access Management for .NET
We help companies using .NET to build identity and access control solutions for modern applications.
duende.link
Adding .NET 10 Passkey Support to Duende IdentityServer 👉 duende.link/berqe86 Learn how to add #dotnet 10 passkey support to a non-Blazor project such as MVC or Razor Pages. #security #aspnetcore #identity #webauthn
Duende Software - Identity and Access Management for .NET
We help companies using .NET to build identity and access control solutions for modern applications.
duende.link
Claims and scopes describe user information in OpenID Connect. Let's see how Duende IdentityServer handles consent, different client types, required vs. optional scopes, and what happens when a client doesn't get everything it asked for. duende.link/97aeqlj 👀 #dotnet #aspnetcore
Duende Software - Identity and Access Management for .NET
We help companies using .NET to build identity and access control solutions for modern applications.
duende.link
The Duende livestream is starting now! Custom Authentication in #aspdotnet Core with Elin & Robert from Active Solution 🕐 Starting now (10:00 EST / 16:00 CEST) Join us on YouTube ➡️ www.youtube.com/watch?v=o0MC... #dotnet #security #identity
Building Custom Authentication in ASP.NET Core
Want to go beyond the built-in authentication handlers in ASP.NET? In this session, Robert Folkesson and Elin Fokine from Active Solution will break down what a RemoteAuthenticationHandler actually…
youtube.com
Secure your native applications, like mobile and desktop applications, using #IdentityServer 🔐 In this video, we cover why in-app login pages are outdated, the role of the browser, the Duende OidcClient library, secure token storage, and more! youtu.be/7_OzM1c-STk #oauth #oidc #dotnet #identity
Mobile and Desktop Applications
Secure your native applications, like mobile and desktop applications using IdentityServer 0:00 Introduction 0:38 Anti pattern: In-app login page 1:19 Why not resource owner password flow? 2:03 Role…
youtu.be