iiinova — where your digital self keeps evolving

Duende Software @duendesoftware.com · 29/09/2026

A practical guide to enforcing fine-grained access control on #dotnet 10 Minimal API endpoints using scope claims in JWTs issued by Duende IdentityServer. ➡️ duende.link/29spt26

012

Duende Software @duendesoftware.com · 23/09/2026

Tomorrow! Even if you don't need full FAPI 2.0 compliance, you'll leave this livestream with at least ONE architectural change to instantly harden your application security. Join Roland Guijt and Joe DeCock: duendesoftware.com/webinars/how...

000

Duende Software @duendesoftware.com · 22/09/2026

Blogged: What #dotnet 11 and C# 15 change for Duende IdentityServer developers: registration confirmation, Blazor and SignalR auth refresh, sessions, and a practical upgrade checklist. duende.link/22spt26

000

Duende Software @duendesoftware.com · 21/09/2026

Banks adopted FAPI 2.0 first, but the profile applies anywhere high-value transactions happen. Is your API landscape secure enough? Learn how to harden it here: duendesoftware.com/webinars/how...

010

Duende Software @duendesoftware.com · 18/09/2026

FAPI 2.0 enforces least privilege for access tokens so compromises are contained by design. Watch us configure tightly scoped tokens live: duendesoftware.com/webinars/how...

012

Duende Software @duendesoftware.com · 16/09/2026

We are officially here at #NDCOslo! 🇳🇴 We hit the ground running today with Maarten taking the stage to give his speech on going passwordless. Such a great start to the week! Come say hi if you're around. 👋

010

Duende Software @duendesoftware.com · 15/09/2026

RFC 10017 (BCP 212) makes the Backend for Frontend pattern official IETF best current practice for browser-based OAuth apps. Here's what the RFC recommends and why it matters. duende.link/15spt26 #bff #dotnet #identity

000

Duende Software @duendesoftware.com · 14/09/2026

Stop dealing with shared secrets that can be leaked, rotated poorly, or committed to GitHub. Learn how to implement private_key_jwt for asymmetric client authentication in our FAPI 2.0 livestream. 🔑 duendesoftware.com/webinars/how...

000

Duende Software @duendesoftware.com · 11/09/2026

We've had 3,600 monthly searches for "Duende"… spelled every way except Duende. 😅 So Al Rodriguez is here to settle how to pronounce it: it's doo-EN-deh. 🎤 You're welcome. (Bloopers in video)

010

Duende Software @duendesoftware.com · 10/09/2026

Next week, we’re heading to Norway for NDC Oslo! We can't wait to dive into the sessions and connect with the incredible dev community. Will you be there? Let us know below so we can say hi! 👋 #NDCOslo

010

Duende Software @duendesoftware.com · 10/09/2026

Learn how to implement WhatsApp OTP login with Duende IdentityServer and User Management by building a custom IOtpDispatcher that delivers one-time passwords via Meta's WhatsApp Business Cloud API. duende.link/10spt26 #dotnet #identity

000

Duende Software @duendesoftware.com · 08/09/2026

Standard OAuth 2.0 is great, but what happens when a stolen token can move money? Learn the threat model behind financial-grade security and why you might need FAPI 2.0. Register for the livestream here: duendesoftware.com/webinars/how...

000

Duende Software @duendesoftware.com · 04/09/2026

Curious how DPoP and mTLS bind a token exclusively to the client that requested it? We are demonstrating it live, end-to-end. Watch the live implementation: duendesoftware.com/webinars/how...

000

Duende Software @duendesoftware.com · 04/09/2026

Blogged: Wesley compares three OAuth client authentication methods in ASP.NET Core: Client Secrets, Private Key JWT, and Mutual TLS, with code examples for Duende IdentityServer. duende.link/3s3pt26 #dotnet #oidc #identity

020

Duende Software @duendesoftware.com · 01/09/2026

.NET 11 adds automatic CSRF protection that rejects cross-origin browser requests by default. Learn how this impacts SPAs and IdentityServer deployments, and how to prepare your apps. duende.link/1s3pt26 #dotnet

010

Duende Software @duendesoftware.com · 26/08/2026

The next era of Duende is live! 🚀 We're expanding from a token server to identity infrastructure. IdentityServer v8 brings modular Add-Ons (Adopt what you need, when you need). Learn more: duendesoftware.com/products/ide...

010

Duende Software @duendesoftware.com · 25/08/2026

Blogged: Learn how to restrict passkey registration to approved hardware security keys like YubiKey using Duende User Management's IAttestationTrustPolicy interface. duende.link/p4k4tta #dotnet #webauthn

020

Duende Software @duendesoftware.com · 20/08/2026

Joe DeCock covers three key identity standards milestones from summer 2026: OAuth Identity Chaining reaching Proposed Standard, the Transaction Authorization Challenge draft for human-in-the-loop approval, and Transaction Token chaining across trust domains. duende.link/jhnr982 #identity #dotnet

010

Duende Software @duendesoftware.com · 13/08/2026

🛠️ .NET Devs: The MCP RC brings a great DCR update! SEP-837 advises declaring OIDC application_type to validate redirect URIs with precision (e.g., enforcing HTTPS for web). Grab the C# code to implement this easily in our newest post: duendesoftware.com/blog/2026073...

020

Duende Software @duendesoftware.com · 12/08/2026

Heading to #NDCOslo! 🇳🇴 Visit the Duende Software booth to talk identity & security! Catch our sessions: 🎤 Anders (Sustainsys): ASP.NET Core meets OWASP Top 10 2025 🎤 Maarten Balliauw: Going Passwordless - A Practical Guide to Passkeys in ASP.NET Core See you there! ✨

020

Duende Software @duendesoftware.com · 03/08/2026

Are your AI agents vulnerable to mix-up attacks? The new MCP RC introduces SEP-2468 to definitively identify Authorization Servers & stop bad actors. Good news: Duende IdentityServer users are already protected by default! 🛡️ Dive deep here: duendesoftware.com/blog/2026073...

010

Duende Software @duendesoftware.com · 31/07/2026

"P@ssw0rd1!" passes every password complexity rule, but it's in 100K+ data breaches. 🚨 Complexity ≠ Security. Learn how to integrate the Have I Been Pwned API with Duende User Management to automatically reject compromised passwords at registration. 🛡️👇 duendesoftware.com/blog/2026072...

020

Duende Software @duendesoftware.com · 30/07/2026

The new Model Context Protocol (MCP) RC is stateless! 🚀 No more tracking sessions or sticky load balancers. Deploying MCP servers just got easier. Plus, 6 new SEPs are hardening OAuth security. Read the full architectural breakdown here: duendesoftware.com/blog/2026073... #MCP #AI

020

Duende Software @duendesoftware.com · 21/07/2026

IdentityServer v8 brings architectural refinements to modern .NET workloads. 🛠️ Enjoy unified model for OIDC & SAML connected apps, idiomatic cooperative cancellation, and TimeProvider integration. Read the release notes: docs.duendesoftware.com/identityserv...

000

Duende Software @duendesoftware.com · 16/07/2026

Enterprise identity shouldn't mean forced bundles. 🛑 Extend your infrastructure only when needed with our new Modular Add-Ons: User Management, SAML 2.0, FGSC, Key Management, and Multi-Issuer. Pay only for what you use. Explore the modules: duendesoftware.com/blog/2026060...

010

Duende Software @duendesoftware.com · 13/07/2026

The future of .NET identity is here. 🚀 Hear from the architects shaping the ecosystem. The Duende leadership team dives into ISv8, modular add-ons, and our commitment to expanding identity infrastructure. 📺 Watch the full walkthrough: www.youtube.com/watch?v=qloC... #dotnet

020

Duende Software @duendesoftware.com · 10/07/2026

010

Duende Software @duendesoftware.com · 06/07/2026

Last month, the Duende Software team met up in beautiful Lisbon for our annual offsite. There is so much value in stepping away from the screens to align on our vision, brainstorm, and connect in person. Excited for what’s next! #DuendeSoftware

020

Duende Software @duendesoftware.com · 04/06/2026

021

Duende Software @duendesoftware.com · 03/06/2026

IdentityServer v8 brings architectural refinements to modern .NET workloads. 🛠️ Enjoy idiomatic cooperative cancellation, TimeProvider integration, and a unified model for OIDC & SAML connected apps. Read the release notes: docs.duendesoftware.com/identityserv...

011

Duende Software @duendesoftware.com · 29/05/2026

The Duende Product Insiders program is our dedicated listening channel. We share early design documents and prototypes with the Duende Insiders to get honest and impactful feedback. Help us build the solutions that empowers you and your peers. Apply: duende.link/insiders

000

Duende Software @duendesoftware.com · 19/05/2026

The best architects don't work alone. The Insiders program is a network of senior devs debating BFF and token exchange. Join the conversation and validate your designs. Apply: duende.link/insiders #aspnet #dotnet #aspnetcore

010

Duende Software @duendesoftware.com · 13/05/2026

We build better software when we listen. Product Insiders is our listening channel. We share early designs to get direct feedback. Help us build the tools you need. Talk to a dev: duende.link/insiders #dotnet #aspnet #aspnetcore

000

Duende Software @duendesoftware.com · 11/05/2026

010

Duende Software @duendesoftware.com · 04/05/2026

Identity is hard. Building it alone is harder. 🤝 Join our private Insiders Discord to talk BFF, Passkeys, and OpenTelemetry with the Duende team and senior devs worldwide. A no-fluff zone for mission-critical systems. Apply: duende.link/insiders #dotnet #aspnet #aspnetcore

000

Duende Software @duendesoftware.com · 01/05/2026

We build better software when we listen. Product Insiders is our listening channel. We share early designs to get direct feedback. Help us build the tools you need. ➡️ Apply here: duende.link/insiders #IdentityServer #Duende #aspnet #aspnetcore #dotnet

010

Duende Software @duendesoftware.com · 27/04/2026

The best solution architects do not work in isolation. They validate their ideas with peers and experts. Join the conversation and validate your designs with the best in the industry. Apply: duende.link/insiders #dotnet #aspnet #aspnetcore

000

Duende Software @duendesoftware.com · 24/04/2026

In case you missed it! Our livestream on mastering SAML 2.0 in the .NET ecosystem is now available on YouTube. 📺 Watch it here: www.youtube.com/watch?v=o_tG...

000

Duende Software @duendesoftware.com · 21/04/2026

000

Duende Software @duendesoftware.com · 15/04/2026

000

Duende Software @duendesoftware.com · 13/04/2026

We benchmarked our new Duende Agent Skills on deeply specific identity tasks using Claude Opus 4.6. The results? An average improvement of 28%—and up to 60%! 🔥 Give your AI the domain expertise it’s missing: duende.link/87qibs duende.link/87qibs #IdentityServer #DotNet #Aspnet #Aspnetcore

010

Duende Software @duendesoftware.com · 03/04/2026

When configuring Duende IdentityServer, an "almost right" AI response isn't good enough. 🛑 Our new Duende Agent Skills teach your AI (Copilot, Claude, Cursor) the exact ASP.NET Core & Duende-specific details it needs for secure token management and UI flows. 👉️ duende.link/87qibs

020

Duende Software @duendesoftware.com · 01/04/2026

.NET 10 performance benefits everyone. By optimizing IdentityServer for the new runtime, we pass those gains down to every application that relies on us. Reduced CPU cycles in auth mean lower cloud bills for the entire community. Learn More: duende.link/bpicx #dotnet #aspnet #aspnetcore

000

Duende Software @duendesoftware.com · 30/03/2026

Standards evolve because people participate. Insiders help shape the roadmap. When we prototype new features, we ask the community how they fit real-world architectures. Apply: duende.link/insiders #aspnet #dotnet

020

Duende Software @duendesoftware.com · 27/03/2026

Standards like OAuth and OpenID Connect evolve through community participation. When we prototype new products and features, we engage the community to learn how solutions solve real-world challenges. Your voice has real impact on the future of Duende. Apply: duende.link/insiders

000

Duende Software @duendesoftware.com · 25/03/2026

010

Duende Software @duendesoftware.com · 18/03/2026

The best optimization is the one you don't write. Upgrading to .NET 10 delivers throughput gains purely through runtime improvements. Get a "free" boost by updating the package. Learn More: duende.link/bpicb #aspnet #dotnet

010

Duende Software @duendesoftware.com · 16/03/2026

010

Duende Software @duendesoftware.com · 10/03/2026

000

Duende Software @duendesoftware.com · 09/03/2026

010