We build better software when we listen. Product Insiders is our listening channel. We share early designs to get direct feedback. Help us build the tools you need. ➡️ Apply here: duende.link/insiders #IdentityServer #Duende #aspnet #aspnetcore #dotnet

Stability is a community asset. Aligning with the Microsoft LTS schedule provides a shared timeline for the industry. We can all plan, budget, and coordinate releases together. Predictability helps the whole community function better. Learn more through our docs: duende.link/bpicli #dotnet

.NET 10's new `JsonSerializerOptions.Strict` preset activates five System.Text.Json protections in one line: no duplicate properties, no unmapped fields, case-sensitive matching, nullable enforcement, and required constructor params. 👉️ duende.link/j9dn5q

Works in dev, breaks in prod — auth cookie too large is a frustratingly common issue. 431 errors, silent auth failures, intermittent logouts. Seven fixes for ASP.NET Core, from quick wins to the right long-term fix. 🍪 duende.link/g6kp4t #dotnet

When a session is compromised, do you really want to wait up to 60 mins or more for a JWT to expire? 😱 Learn how to implement an "Emergency Stop" button for token revocation using Reference Tokens and Duende IdentityServer in #dotnet and #aspnetcore duende.link/2w3sfr

Custom auth creates a "training tax." New hires waste weeks learning proprietary code. License IdentityServer to use a standard. Hire .NET devs who are productive on day one. Learn how: duende.link/appmodli #dotnet #aspnet #aspnetcore

The best solution architects do not work in isolation. They validate their ideas with peers and experts. Join the conversation and validate your designs with the best in the industry. Apply: duende.link/insiders #dotnet #aspnet #aspnetcore

Want your AI to translate our docs for you? 📖 The new Duende Documentation MCP Server brings our docs, blog posts, and GitHub code samples directly into your AI coding assistant via local SQLite full-text search. Requires .NET 10 SDK. Setup guide here: duende.link/87qibs

In case you missed it! Our livestream on mastering SAML 2.0 in the .NET ecosystem is now available on YouTube. 📺 Watch it here: www.youtube.com/watch?v=o_tG...

.NET 10 brings massive performance gains. IdentityServer leverages these immediately, showing reduced allocation rates in the token validation path. Learn more 👉️ duende.link/bpicli #aspnet #dotnet

The 2025 OWASP Top 10 is out, and it's worth a read for anyone building web apps on ASP.NET Core. Guest post by Christian Wenz covers all 10 items with practical .NET examples. 🔒 duende.link/r2cx8w #dotnet

We've published guidance on the high-severity #aspnetcore Data Protection vulnerability, CVE-2026-40372 (Elevation of Privilege) Read our guide to: * Determine if your applications are affected * Get mitigation steps 👉️ duende.link/twe5wp #dotnet

The wild west of access tokens has been over for a while! 🤠 RFC 9068 defines JWT tokens, including at+jwt to prevent token confusion attacks. Learn how to securely validate tokens in #aspnetcore, handle dual-semantic 'sub' claims, and more: duende.link/45dhn2 #dotnet

The Duende Product Insiders program is our dedicated listening channel. We share early design documents and prototypes with the Duende Insiders to get honest and impactful feedback. Help us build the solutions that empowers you and your peers. Apply: duende.link/insiders #dotnet #aspnet

🚨 Going LIVE now! Join us for "A First Look at Duende’s First-Party SAML 2.0 Support." See the native IdP integration and OIDC-SAML bridging in action. Don't miss it: duendesoftware.com/webinars/fir... #dotnet #aspnet #aspnetcore

🚨 Going LIVE in 1 hour! Join us at 10 EDT / 14:00 UTC for "A First Look at Duende’s First-Party SAML 2.0 Support." See the native IdP integration and OIDC-SAML bridging in action. Don't miss it: duendesoftware.com/webinars/fir... #dotnet #aspnet #aspnetcore

Identity governance isn't just a compliance concern — it's a developer problem. Audit trails, consent versioning, data residency, retention policies: here's the checklist that separates you from a very uncomfortable audit. 📋 duende.link/k9mt5f #dotnet

Tomorrow! Want to help us build the “last mile” of our SAML 2.0 integration before the big June launch? 🚀 Tune into our livestream on April 21 to get an exclusive look at the Duende Product Insiders community! Join us: duendesoftware.com/webinars/fir... #dotnet #aspnet #aspnetcore

Want your AI to translate our docs for you? 📖 The new Duende Documentation MCP Server brings our docs, blog posts, and GitHub code samples directly into your AI coding assistant via local SQLite full-text search. Requires .NET 10 SDK. Setup guide here: duende.link/87qibs #IdentityServer #DotNet

Stop holding your SAML integrations together with band-aids and bubble gum! 🩹 Get a sneak peek at native SAML 2.0 support in Duende IdentityServer on our upcoming livestream. See OIDC-SAML bridging in action. 📅 Apr 21 | 10 EDT 👉️ duendesoftware.com/webinars/fir... #dotnet #aspnet #aspnetcore

SAML turned 20 and it's not going anywhere. Enterprise SSO, government federations, academic networks: they all run on SAML. Here's why it endures, and what it means for IdentityServer v8. 🔐 duende.link/p2rn8q #dotnet

Stop compromising your architecture for your identity provider. 🔑 Duende gives you true sovereignty in the .NET LTS era: ✅ No lock-in (On-prem/Cloud/Hybrid) ✅ Full UI/UX freedom ✅ Custom logic in your .NET pipeline Build it your way: duende.link/2swrhhw #dotnet #aspnet #aspnetcore

Identity is hard. Building it alone is harder. 🤝 Join our private Insiders Discord to talk BFF, Passkeys, and OpenTelemetry with the Duende team and senior devs worldwide. A no-fluff zone for mission-critical systems. Apply: duende.link/insiders #IdentityServer #DotNet

One identity solution. Both protocols. Total control. 🔐 We're thrilled to preview our first-party SAML 2.0 support for Duende IdentityServer. Catch the live demo and see how it works on April 21! Details & RSVP: duendesoftware.com/webinars/fir... #dotnet #aspnet #aspnetcore

The "Cookie Apocalypse" is not a future risk. It's here. Classic OIDC-based SPA authentication... It's clear: every SPA needs a BFF (Backend for Frontend). Here's the architecture to protect your tokens & a #dotnet 10 migration guide using Duende.BFF. duende.link/4p0c4l

Adding Duende expertise to your AI assistant is incredibly easy. Using Claude Code CLI? Just run: /plugin marketplace add DuendeSoftware/duende-skills Try it out, ask it to "apply security best practices," and let us know what skills we should add next! 👇 duende.link/87qibs

We benchmarked our new Duende Agent Skills on deeply specific identity tasks using Claude Opus 4.6. The results? An average improvement of 28%—and up to 60%! 🔥 Give your AI the domain expertise it’s missing: duende.link/87qibs duende.link/87qibs #IdentityServer #DotNet #Aspnet #Aspnetcore

Identity is the first thing to fail and the last thing teams think to treat as proper infrastructure. This post looks at what changes when you stop bolting it on and start building it in. 👉️ duende.link/3hq7mz #dotnet

Duende is now sponsoring Verify (github.com/VerifyTests/...), the powerful #dotnet snapshot testing library we use to protect the API stability of security products like IdentityServer and BFF. Full post: duende.link/97wq4j #opensource #testing

Want your AI to translate our docs for you? 📖 The new Duende Documentation MCP Server brings our docs, blog posts, and GitHub code samples directly into your AI coding assistant via local SQLite full-text search. Requires .NET 10 SDK. Setup guide here: duende.link/87qibs

Want your AI to translate our docs for you? 📖 The new Duende Documentation MCP Server brings our docs, blog posts, and GitHub code samples directly into your AI coding assistant via local SQLite full-text search. Requires .NET 10 SDK. Setup guide here: duende.link/87qibs #IdentityServer #DotNet

Stop bloating your auth cookies! 🍪 Learn how to: 1️⃣ Use IdentityServer server-side sessions and improve performance 2️⃣ Use AuthenticationProperties to store dynamic user metadata (like location) Article at duende.link/8624kh #dotnet #aspnetcore

We benchmarked our new Duende Agent Skills on deeply specific identity tasks using Claude Opus 4.6. The results? An average improvement of 28%—and up to 60%! 🔥 Give your AI the domain expertise it’s missing: duende.link/87qibs #identityserver #dotnet #aspnet #aspnetcore

Adding Duende expertise to your AI assistant is incredibly easy. Using Claude Code CLI? Just run: /plugin marketplace add DuendeSoftware/duende-skills Try it out, ask it to "apply security best practices," and let us know what skills we should add next! 👇 duende.link/87qibs

SaaS providers are black boxes. Duende gives you full source access. Step-through to understand exactly how it all works. Learn how: duende.link/appmodli #dotnet #aspnet #aspnetcore

When configuring Duende IdentityServer, an "almost right" AI response isn't good enough. 🛑 Our new Duende Agent Skills teach your AI (Copilot, Claude, Cursor) the exact ASP.NET Core & Duende-specific details it needs for secure token management and UI flows. 👉️ duende.link/87qibs

Looking to lock down your web app? 🔒 Don't just set a #CSP, learn how to monitor it! Our new video dives into Content Security Policy Reporting using report-uri, report-to, and friends. Know when a violation occurs: youtu.be/apoRlEq5PAs #WebSecurity #dotnet #CSP #InfoSec

AI + Identity = 🚀🛡️ General AI models struggle with specific identity configs. That's why we built Duende Agent Skills & the Duende Documentation MCP Server! Give your coding assistant deep knowledge of Duende IdentityServer, BFF, and identity protocols. Read more: duende.link/87qibs

.NET 10 performance benefits everyone. By optimizing IdentityServer for the new runtime, we pass those gains down to every application that relies on us. Reduced CPU cycles in auth mean lower cloud bills for the entire community. Learn More: duende.link/bpicx #dotnet #aspnet #aspnetcore

SaaS providers are black boxes. Duende gives you full source access. Step-through to understand exactly how it all works. Learn how: duende.link/appmodli #dotnet #aspnet #aspnetcore

Auth is technical; implementation is human. We want to know what frustrates and excites you. Let’s build a more human-centric developer experience together. Apply here: duende.link/insiders #aspnet #dotnet

User registration that follows OpenID Connect? Use the prompt=create parameter. Redirects to your sign-up page, then brings the new user back into the OIDC flow for token acquisition. Supported by IdentityServer. Learn more: duende.link/978w4u #OIDC #DotNet

.NET 10 performance benefits everyone. By optimizing IdentityServer for the new runtime, we pass those gains down to every application that relies on us. Reduced CPU cycles in auth mean lower cloud bills for the entire community. Learn more here: duende.link/2swrhhw #dotnet #aspnet #aspnetcore

Standards evolve because people participate. Insiders help shape the roadmap. When we prototype new features, we ask the community how they fit real-world architectures. Apply: duende.link/insiders #aspnet #dotnet

Standards like OAuth and OpenID Connect evolve through community participation. When we prototype new products and features, we engage the community to learn how solutions solve real-world challenges. Your voice has real impact on the future of Duende. Apply: duende.link/insiders

.NET 10 performance benefits everyone. By optimizing IdentityServer for the new runtime, we pass those gains down to every application that relies on us. Reduced CPU cycles in auth mean lower cloud bills for the entire community. Learn More: duende.link/is74b0b #dotnet #aspnet #aspnetcore

Don't rely on status pages during an outage. Commercial licenses include priority support. Direct assistance from the maintainers is a necessity for mission-critical infra. Learn how: duende.link/appmodb #dotnet #aspnet

Null exceptions are costly. We are enforcing strict Nullable Reference Types across the IdentityServer API in .NET 10. The compiler catches bugs before you deploy. The community deserves rigorous design. Learn more on our documentation site: duende.link/bpicli #dotnet #aspnet

Standards evolve because people participate. Insiders help shape the roadmap. When we prototype new features, we ask the community how they fit real-world architectures. Apply: duende.link/insiders #aspnet #dotnet

Stop writing boilerplate code for ClaimsPrincipal! 🛡️ #csharp 14 extension members let you use properties to centralize claim access logic, leading to cleaner, #aspnetcore application code. Read more: duende.link/7efu3d