Sign in

Dominick Baier

@leastprivilege.com
304 followers 30 following 76 posts

Advisor & Board Member at Duende Software - @duendesoftware.com

PostsRepliesMedia
Reposted by Dominick Baier
Maarten Balliauw @maartenballiauw.be · 25/06/2026
Every developer has a side project. Mine became... writing a book. Just published The Side Project, about a dev whose innocent youth football app gets hijacked by organized crime. Check it out: books2read.com/u/bP2nll
books2read.com
Available now at your favorite digital store!
The Side Project by Maarten Balliauw
0127
Reposted by Dominick Baier
Rob Ashton @typicalcowboybullshit.com · 13/06/2026
Well hello there
011
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 04/06/2026
The future of .NET identity is here. 🚀 Hear from the architects shaping the ecosystem. The Duende leadership team dives into ISv8, modular add-ons, and our commitment to expanding identity infrastructure. 📺 Watch the full walkthrough: www.youtube.com/watch?v=qloC...
021
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 05/06/2026
Stop hand-rolling bespoke user systems. 🏗️ Our new User Management add-on brings fully supported user storage, auth, and lifecycle management directly to your deployment. Passwords, MFA, and passkeys are built-in, not bolted on. Read the blog: duendesoftware.com/blog/2026060...
duendesoftware.com
Duende Software - Identity and Access Management for .NET
Duende Software is a company that builds industry-leading security software.
011
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 03/06/2026
IdentityServer v8 brings architectural refinements to modern .NET workloads. 🛠️ Enjoy idiomatic cooperative cancellation, TimeProvider integration, and a unified model for OIDC & SAML connected apps. Read the release notes: docs.duendesoftware.com/identityserv...
011
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 02/06/2026
We go LIVE in one hour! 🚨 Join us for the Spring Launch Event to see IdentityServer v8, 5 new modular add-ons, and the next era of Duende Identity Infrastructure. ⏰ 10:00 EDT / 16:00 CEST / 14:00 UTC Be there: www.youtube.com/watch?v=qloC...
youtube.com
Spring Launch Event: The Next Era of Duende Identity Infrastructure
This isn't a point release. This is a new chapter. On June 2, Duende ships the most significant release in the company's history: IdentityServer v8 - a .NET 10-exclusive major release, five modular…
023
Reposted by Dominick Baier
Damian Hickey @damian.social · 02/06/2026
IdentityServer got SAML support before GTA 6
131
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 28/05/2026
What’s next for .NET identity? A purpose-built management plane and storage abstraction. 🏗️ We’re unveiling a new additive infrastructure layer that powers User Management today and our capabilities of tomorrow. Learn more on June 2: duendesoftware.com/webinars/the...
duendesoftware.com
The next era of Duende Identity Infrastructure
Learn more about the Next Era of Duende Identity Infrastructure including IdentityServer v8, modular add-ons, a new infrastructure foundation, and more.
001
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 22/05/2026
What’s next for .NET identity? A purpose-built management plane and storage abstraction. 🏗️ We’re unveiling a new additive infrastructure layer that powers User Management today and our capabilities of tomorrow. Learn more on June 2: duendesoftware.com/webinars/the...
duendesoftware.com
The next era of Duende Identity Infrastructure
Learn more about the Next Era of Duende Identity Infrastructure including IdentityServer v8, modular add-ons, a new infrastructure foundation, and more.
002
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 15/05/2026
What’s next for .NET identity? A purpose-built management plane and storage abstraction. 🏗️ We’re unveiling a new additive infrastructure layer that powers User Management today and our capabilities of tomorrow. Learn more on June 2: duendesoftware.com/webinars/the...
duendesoftware.com
The next era of Duende Identity Infrastructure
Learn more about the Next Era of Duende Identity Infrastructure including IdentityServer v8, modular add-ons, a new infrastructure foundation, and more.
001
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 11/05/2026
Developers: IdentityServer v8 is built EXCLUSIVELY for .NET 10. 🛠️ We dropped multi-targeting for .NET 8 & 9 to deliver leaner packages, cleaner code paths, and full access to runtime capabilities like TimeProvider & HybridCache. See it live June 2: duendesoftware.com/webinars/the...
duendesoftware.com
The next era of Duende Identity Infrastructure
Learn more about the Next Era of Duende Identity Infrastructure including IdentityServer v8, modular add-ons, a new infrastructure foundation, and more.
001
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 27/04/2026
Custom auth creates a "training tax." New hires waste weeks learning proprietary code. License IdentityServer to use a standard. Hire .NET devs who are productive on day one. Learn how: duende.link/appmodli #dotnet #aspnet #aspnetcore
duende.link
Application Modernization
Future-proof your apps with Duende's identity modernization. Get better security and control while preserving your existing identity logic.
001
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 23/04/2026
.NET 10 brings massive performance gains. IdentityServer leverages these immediately, showing reduced allocation rates in the token validation path. Learn more 👉️ duende.link/bpicli #aspnet #dotnet
duende.link
The Big Picture
An overview of modern application architecture patterns and how OpenID Connect and OAuth 2.0 protocols implemented by IdentityServer solve authentication and API access challenges
011
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 22/04/2026
We've published guidance on the high-severity #aspnetcore Data Protection vulnerability, CVE-2026-40372 (Elevation of Privilege) Read our guide to: * Determine if your applications are affected * Get mitigation steps 👉️ duende.link/twe5wp #dotnet
duende.link
Update Guidance for CVE-2026-40372 - ASP.NET Data Protection
Guidance on the high-severity CVE-2026-40372 vulnerability in Microsoft.AspNetCore.DataProtection. Learn how attackers can use it, check if your application is affected, and find the critical steps…
024
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 16/04/2026
Stop compromising your architecture for your identity provider. 🔑 Duende gives you true sovereignty in the .NET LTS era: ✅ No lock-in (On-prem/Cloud/Hybrid) ✅ Full UI/UX freedom ✅ Custom logic in your .NET pipeline Build it your way: duende.link/2swrhhw #dotnet #aspnet #aspnetcore
duende.link
Duende IdentityServer
The most flexible and standards-compliant OpenID Connect and OAuth framework for ASP.NET Core.
011
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 16/04/2026
SAML turned 20 and it's not going anywhere. Enterprise SSO, government federations, academic networks: they all run on SAML. Here's why it endures, and what it means for IdentityServer v8. 🔐 duende.link/p2rn8q #dotnet
duende.link
The History and Future of SAML: Why a 20-Year-Old Protocol Still Matters
SAML isn't legacy — it's entrenched. Tracing the protocol from its 2001 origins through its enduring role in enterprise, government, and academic identity federation, and what it means for…
001
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 07/04/2026
Stop bloating your auth cookies! 🍪 Learn how to: 1️⃣ Use IdentityServer server-side sessions and improve performance 2️⃣ Use AuthenticationProperties to store dynamic user metadata (like location) Article at duende.link/8624kh #dotnet #aspnetcore
duende.link
Extending Duende IdentityServer Server-Side Sessions with Dynamic User Metadata
Stop bloating your authentication cookies. Use Duende IdentityServer server-side sessions and AuthenticationProperties to store dynamic user metadata (like location) on the server, which improves…
101
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 24/03/2026
Stop writing boilerplate code for ClaimsPrincipal! 🛡️ #csharp 14 extension members let you use properties to centralize claim access logic, leading to cleaner, #aspnetcore application code. Read more: duende.link/7efu3d
duende.link
Improving .NET Security Code with C# 14 Property Extensions
Stop writing boilerplate code for ClaimsPrincipal. C# 14 extension members let you use properties to centralize claim access logic, leading to cleaner, more secure ASP.NET Core applications.
012
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 20/03/2026
Want the power of Duende IdentityServer but with faster time-to-value? ⏱️ We’re previewing a first-party user management .NET SDK on March 24th that gives you Passkeys, MFA, and audit trails out-of-the-box. Keep your data control, ditch the custom coding. RSVP: duende.link/78q3hk #dotnet #aspnet
duende.link
A First Look at Duende User Management | Duende
Join us March 24 for a first look at Duende User Management. Learn to replace ASP.NET Identity with built-in Passkeys, MFA, and audits.
033
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 17/03/2026
SaaS providers are black boxes. Duende gives you full source access. Step-through to understand exactly how it all works. Learn how: duende.link/appmodb #aspnet #aspnetcore #dotnet
duende.link
Application Modernization
Future-proof your apps with Duende's identity modernization. Get better security and control while preserving your existing identity logic.
022
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 10/03/2026
Authentication on a different device from the one you're using? 🧐 Learn how to implement Client-Initiated Backchannel Authentication (CIBA) in #ASPNETCore and #dotnet: duende.link/3ysz4u Especially helpful in high-trust scenarios.
duende.link
Client-Initiated Backchannel Authentication (CIBA) in ASP.NET Core 10 with Duende Identity Server
Learn about the Client-Initiated Backchannel Authentication (CIBA) standard, an OpenID Connect extension for authenticating users on a separate device. See how to implement this high-trust flow with…
032
Reposted by Dominick Baier
Sustainsys @sustainsys.com · 05/03/2026
Duende Software's legendary training on Identity and Access Management was originally created by Dominick Baier and Brock Allen. We're offering the training online/remotely as 6 half-day blocks in EU afternoons/US mornings, starting March 10. Read more and sign up at sustainsys.com/training
sustainsys.com
Training Information
002
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 03/03/2026
The livestream starts NOW! 🔴 Security you can’t prove isn’t security, it’s hope. Stop relying on manual checks. We’re showing you how to automate your security testing to ensure your API only accepts your trusted tokens. 🔗 Join us now: duende.link/lsjwt26b #OAuth2 #JWT #DotNet
duende.link
Livestream: Are your access tokens really secure?
Are your APIs vulnerable? Explore JWT pitfalls, learn to prevent exploits, and compare JWTs vs. opaque tokens in this expert-led session.
011
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 03/03/2026
Should you add rate limiting to your Duende IdentityServer deployment? 🤔 Our new article breaks down the why (and why not), plus 3 implementation options. Read the full article 👉 duende.link/87wrkjh #dotnet #ASPNETCore #OAuth #OpenIDConnect
duende.link
Rate Limiting IdentityServer Endpoints
Learn why rate limiting Duende IdentityServer endpoints is usually unnecessary, and when you do need it. Explore a layered approach using network proxies, ASP.NET Core middleware, and custom…
001
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 04/03/2026
Null exceptions are costly. We are enforcing strict Nullable Reference Types across the IdentityServer API in .NET 10. The compiler catches bugs before you deploy. The community deserves rigorous design. Learn More: duende.link/bpicb #aspnet #dotnet
001
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 26/02/2026
Stability is a community asset. Aligning with the Microsoft LTS schedule provides a shared timeline for the industry. We can all plan, budget, and coordinate releases together. Predictability helps the whole community function better. Learn more: duende.link/bpicb #aspnet #dotnet #LTS
duende.link
The Big Picture
An overview of modern application architecture patterns and how OpenID Connect and OAuth 2.0 protocols implemented by IdentityServer solve authentication and API access challenges
011
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 10/02/2026
No more overprivileged access tokens? 🔑 Implement strict trust boundaries in your APIs with resource isolation (#OAuth RFC 8707). Learn how to configure it in Duende IdentityServer: duende.link/87qt2j #dotnet
duende.link
Implementing Zero Trust with Resource Isolation
Learn how to enforce strict trust boundaries between your APIs and prevent overprivileged access tokens by adopting Resource Isolation, based on OAuth 2.0's RFC 8707, with Duende IdentityServer.
011
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 10/02/2026
In this video, we look deeper into critical security-related HTTP headers that can significantly strengthen your website's defenses. Expect X-Content-Type-Options, Referrer-Policy:, X-FRAME-OPTIONS, Content Security Policy (CSP), ... youtu.be/OztgrdMQG94 #dotnet #aspnetcore #SecurityTips
youtu.be
MORE Essential HTTP Headers
In this video, we look deeper into critical security-related HTTP headers that can significantly strengthen your website's defenses. What you'll learn in this video: * X-Content-Type-Options:…
001
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 05/02/2026
SaaS providers are black boxes. Duende gives you full source access. Step-through to understand exactly how it all works. Learn More: duende.link/2swrhhw #aspnet #aspnetcore #dotnet
duende.link
Duende IdentityServer
The most flexible and standards-compliant OpenID Connect and OAuth framework for ASP.NET Core.
011
Dominick Baier @leastprivilege.com · 30/01/2026
Supply chain something something... not an issue - all focus back on AI!
000
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 27/01/2026
We're proud to announce that Duende Software's latest Open Source Sponsorship goes to #BenchmarkDotNet! 🚀 Check out the full post for details on the project: duende.link/o55bmd #dotnet
duende.link
BenchmarkDotNet - Open Source Sponsorship
Duende Software's latest Open Source Sponsorship goes to BenchmarkDotNet, a benchmarking library for .NET.
011
Reposted by Dominick Baier
Maarten Balliauw @maartenballiauw.be · 20/01/2026
Recording of my talk on passkeys in #aspnetcore at NDC Copenhagen is up! #dotnet Also includes a pointer on how to add passkeys to Razor Pages for folks who aren't on the #Blazor train. www.youtube.com/watch?v=P7eb... #dotnet
youtube.com
Going Passwordless - A Practical Guide to Passkeys in ASP.NET Core - Maarten Balliauw
YouTube video by NDC Conferences
0105
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 21/01/2026
Simplify your identity mess! 🤯 Learn how a Federation Gateway with Duende IdentityServer orchestrates all your IdPs (Entra ID, Google, SAML) for unified, agile security. Must-read architecture deep dive! duende.link/8aefizq #IdentityOrchestration #SSO #Security #dotnet
duende.link
Building a Federation Gateway with Duende IdentityServer: Strategies and Considerations for Identity Orchestration
Learn the core benefits of building a federation gateway that brings together Entra ID, Okta, SAML, Auth0 though a centralized authentication provider like DUende IdentityServer.
001
Reposted by Dominick Baier
Adam Ralph @adamralph.com · 24/01/2026
My OSS is developed by humans github.com/adamralph/mi...
github.com
GitHub - adamralph/minver: 🏷 Minimalistic versioning using Git tags.
🏷 Minimalistic versioning using Git tags. Contribute to adamralph/minver development by creating an account on GitHub.
1151
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 07/01/2026
Stop struggling with diverse identity providers. 🛑 A Federation Gateway, such as Duende IdentityServer, is the key to: 🔑 Centralized Compliance ⚡️ Operational Agility 👤 Unified User Login duende.link/8aefizq #IdentityOrchestration #SSO #Security #dotnet
duende.link
Building a Federation Gateway with Duende IdentityServer: Strategies and Considerations for Identity Orchestration
Learn the core benefits of building a federation gateway that brings together Entra ID, Okta, SAML, Auth0 though a centralized authentication provider like DUende IdentityServer.
001
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 06/01/2026
Duende Resolution: Don't Store Tokens in the Browser. 🔐 Browser tokens are an XSS risk. Secure your SPAs and Blazor WASM apps with the Duende BFF framework, the best way to handle protocol interactions and token management safely. ➡️ duende.link/bff4b1b
011
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 05/01/2026
The Duende Product Insiders program is a private technical channel for partnership. Discuss Identity Strategy, Architecture, and Deployment Nuances directly with Duende experts. Stop guessing, start collaborating. 🙌 ➡️ duende.link/discord
duende.link
Join the Duende Insiders Discord Server!
Check out the Duende Insiders community on Discord – hang out with 42 other members and enjoy free voice and text chat.
001
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 30/12/2025
For devs who care about identity 🚨, Product Insiders get: - Early access to features. - Deep collaboration with Duende leaders. - Direct influence on .NET identity & security. Where standards meet code. Apply: duende.link/insiders #DuendeInsiders #SecurityExperts
duende.link
Duende Product Insiders
We invite you to join a deeply technical, standards-driven community to help shape the future of .NET security and identity.
001
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 29/12/2025
BFF v4: You can't secure what you can't see. OpenTelemetry is baked right in for end-to-end observability of your auth journey (redirect, token exchange, API calls). duende.link/bff4b1b #OpenTelemetry #Observability #DuendeBFF #Diagnostics #Tracing
duende.link
Secure frontend apps with the BFF Pattern
Secure frontend apps with the Backend for Frontend (BFF) pattern. Simplify token management and boost security using Duende BFF v4, with multi-frontend support.
012
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 22/12/2025
Your opinion on that tricky DPoP implementation? We want it. Duende Product Insiders is the high-signal, zero-noise channel for advanced .NET identity and security discussions. Join Duende's Product Insiders. ➡️ duende.link/discord #dotnet #ZeroNoise #Identity
duende.link
Join the Duende Insiders Discord Server!
Check out the Duende Insiders community on Discord – hang out with 42 other members and enjoy free voice and text chat.
001
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 18/12/2025
Identity developers, lead the way! Join Duende Product Insiders: Directly influence the roadmap, get early feature access, and collaborate with senior experts. Your expertise is needed. Apply today: duende.link/discord #DuendeInsiders #SecurityExperts
duende.link
Join the Duende Insiders Discord Server!
Check out the Duende Insiders community on Discord – hang out with 42 other members and enjoy free voice and text chat.
012
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 19/12/2025
🛡️ BFF v4: Frontend Security Simplified Frontend devs shouldn't handle tokens or refresh cycles. BFF keeps security on the server, eliminating XSS risks. v4 adds multi-frontend support for operational sanity. Ditch the token burden entirely. ➡️ duende.link/bff4b0b
duende.link
Duende BFFv4 is now available
Duende BFFv4 is now available! Learn about multi-frontend, simplified security, and unlock end-to-end visibility with OpenTelemetry.
013
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 17/12/2025
Happy Holidays from the Duende Team! 🎄 As the year winds down, we want to thank our amazing community for trusting Duende Software to secure your applications. We wish you and yours a wonderful holiday season filled with joy, rest, and peace. Wishing you safe deployments and happy days!
031
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 16/12/2025
Stop wishing for a feature. Start building it with us. The Duende Product Insiders program is your channel for direct influence on the IdentityServer and BFF roadmap. Join the Insiders: duende.link/discord #DuendeSoftware #IdentityServer
duende.link
Join the Duende Insiders Discord Server!
Check out the Duende Insiders community on Discord – hang out with 42 other members and enjoy free voice and text chat.
001
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 12/12/2025
Stop struggling with diverse identity providers. 🛑 A Federation Gateway, such as Duende IdentityServer, is the key to: 🔑 Centralized Compliance ⚡️ Operational Agility 👤 Unified User Login duende.link/8aefizq #IdentityOrchestration #SSO #Security #dotnet
duende.link
Building a Federation Gateway with Duende IdentityServer: Strategies and Considerations for Identity Orchestration
Learn the core benefits of building a federation gateway that brings together Entra ID, Okta, SAML, Auth0 though a centralized authentication provider like DUende IdentityServer.
001
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 11/12/2025
Duende BFF v4 is available! Architecturally, this is huge: you can now support multiple frontends from a single, robust backend. Plus, we've integrated OpenTelemetry for seamless end-to-end observability in your identity flow. Simplify your stack: duendesoftware.com/blog/2025120...
duendesoftware.com
Duende BFFv4 is now available
Duende BFFv4 is now available! Learn about multi-frontend, simplified security, and unlock end-to-end visibility with OpenTelemetry.
033
Reposted by Dominick Baier
Barry Dorrans @blowdart.me · 08/12/2025
Generating SBOMs for .NET apps and NuGet packages with Microsoft.Sbom.Targets
idunno.org
Generating SBOMs for .NET apps and NuGet packages with Microsoft.Sbom.Targets
How to use the Microsoft.SBOM.Targets NuGet package to produce a Software Bill of Materials (SBOM) during your release builds.
1268
Reposted by Dominick Baier
Duende Software @duendesoftware.com · 08/12/2025
Ever wondered how browsers determine what kind of content they're displaying? It's usually through the Content-Type header. But what happens when that's missing or incorrect? It can be a serious security risk! Let's see how to fix this in #aspnetcore youtu.be/kSaSb2hBbyk #dotnet
youtu.be
Understanding the X-Content-Type-Options Header
Ever wondered how browsers determine what kind of content they're displaying? It's usually through the Content-Type header. But what happens when that's missing or incorrect? That's where MIME type…
002
Reposted by Dominick Baier
Barry Dorrans @blowdart.me · 03/12/2025
Farewell to try .NET a way to run code right in docs that allowed me to introduce a new set of developers and PMs to various security challenges and problems over 10 years. It evolved from running lots of containers in weird isolation setups, all the way through to WASM.
github.com
GitHub - dotnet/try: Try .NET provides developers and content authors with tools to create interactive experiences.
Try .NET provides developers and content authors with tools to create interactive experiences. - dotnet/try
1216
Reposted by Dominick Baier
Erlend Oftedal @webtonull.bsky.social · 06/12/2025
The call for papers for NDC Security ends tomorrow. Come do your talk in Oslo: ndcsecurity.com/call-for-pap...
035