Duende Developer Blog
Expert advice for developers and technical leaders building secure .NET applications.
-
-
- Wesley Cabus
-
- Khalid Abuhakmeh
-
- Khalid Abuhakmeh
-
- Maarten Balliauw
-
- Maarten Balliauw
-
- Joe DeCock
-
- Khalid Abuhakmeh
-
-
-
- Maarten Balliauw
-
- Khalid Abuhakmeh
-
- Joe DeCock
-
-
-
-
-
-
-
- Planning a Successful Migration from IdentityServer3 to Duende IdentityServer Khalid Abuhakmeh, Wesley Cabus
- Client Secrets, Mutual TLS and Private Key JWT, Oh My! Wesley Cabus
- How To Spell "Duende" Khalid Abuhakmeh
- Understanding .NET 11 Automatic CSRF Protection: A Guide for Identity Developers Khalid Abuhakmeh
- Security Lingo Explained: TOTP (Time-based One-Time Password) Maarten Balliauw
- Custom Passkey Attestation Policies: Restricting Login to Hardware Keys Maarten Balliauw
- OAuth Identity Chaining, Transaction Tokens & HITL: Summer 2026 Recap Joe DeCock
- What Is Identity in Software? Khalid Abuhakmeh
- Security Is a Spectrum: How to Choose Session Lifetimes in Duende IdentityServer Khalid Abuhakmeh, Maarten Balliauw
- Passkeys and WebAuthn with Duende IdentityServer and User Management Maarten Balliauw
- Authenticating Players in Godot 4 with OAuth 2.0 and OpenID Connect Khalid Abuhakmeh
- Hardening OAuth in the newest 2026-07-28 MCP Release Candidate Joe DeCock
- Unify Your SAML and OIDC Signing Keys with Automatic Rotation and Duende IdentityServer Khalid Abuhakmeh, Brett Hazen
- You Just Inherited a Duende IdentityServer. Now What? Khalid Abuhakmeh, Wesley Cabus
- Stop Accepting Breached Passwords: Integrating HaveIBeenPwned with Duende UserManagement AL Rodriguez, Khalid Abuhakmeh