Don’t Promise FAPI 2.0. Prove it.

Validate your existing Duende IdentityServer configuration against FAPI 2.0 and OAuth 2.1 requirements and produce a conformance report to support auditing. It also provides actionable recommendations to close any gaps.

View Documentation View Pricing & Tiers

Compliance is a Capability, Not a Consumption Metric.

FAPI is binary. You pass or you don't. The Financial-Grade Security & Conformance add-on treats FAPI conformance as a compliance outcome, not a runtime feature. Your security team gets auditable proof and your dev team gets actionable guidance without re-architecting or leaving your .NET environment.

Conformance Report to Support Audit

Inspect every server setting and registered client against OAuth 2.1 and FAPI 2.0 Security Profile requirements. Hand the resulting report to an auditor — no translation between dev assurances and audit language required.

Actionable Guidance, Not Just Findings

The report doesn't just flag what failed. It tells you how to fix it, down to the configuration property. FAPI-compliant implementation becomes the guided default path, not a research project.

Native to .NET. Native to Your Deployment

Install via NuGet into your existing Duende IdentityServer v8.x+ deployment. Works in self-hosted and air-gapped environments. No SaaS dependency.

Capabilities

One workflow and an artifact that closes the loop between your security team's requirements and your dev team's implementation. Install the add-on into your existing IdentityServer deployment, run the report, and hand the auditor an artifact that speaks for itself.

Define the Requirement: Your Security Architect or CISO sets the standard: 'we need FAPI 2.0.'
Run the Report: Install the NuGet package in to your existing IdentityServer solution. Open the conformance report for instant insights.
Fix what it flags: The report tells your dev team exactly what to change, configuration property by configuration property.
Re-run. Hand to auditor: Prove conformance with a human-readable HTML report. No ambiguity. No back-and-forth.

How to Get It

Financial-Grade Security & Conformance is available as a capability of Duende IdentityServer across eligible tiers: