--- title: "IdentityServer in Production" description: "This 3-day workshop shows how to run Duende IdentityServer in production: HTTPS certificates, signing keys, configuration, logging and continuous deployment." url: https://tn-data.se/courses/identityserver-in-production/ type: workshop lang: en alternate: https://tn-data.se/sv/kurser/identityserver-i-produktion.md site: https://tn-data.se/ image: https://tn-data.se/_astro/21.aGSWFbJj_Z1pIgyQ.webp --- # IdentityServer in Production > Learn how to run Duende IdentityServer in a real production environment, from configuration and certificates to logging and deployment. No longer offered as a standard course. [Get in touch](https://tn-data.se/contact/) if you need training in this area. ## Workshop facts - **Duration:** 3 days or 6 half days - **Level:** Master - **Language:** English, Swedish This workshop continues where [Introduction to IdentityServer and OpenID Connect](https://tn-data.se/courses/introduction-to-identityserver-and-openid-connect/) leaves off, and it really is about production. You deploy a client, an API and a fully configured IdentityServer to the public internet, with real TLS certificates and automatic build and deployment. I don't cut corners in this workshop. You work through every step of a real identity solution in extensive hands-on exercises, and I show you the pitfalls along the way. ### What You Will Learn - Store configuration data in a separate configuration service - Send logs to a separate logging server for analytics and visualization - Use real HTTPS certificates - Create your own token signing keys - Use continuous deployment to deploy your services ### Who Is This Workshop For? Developers who want to learn step by step how to deploy an IdentityServer solution securely to the internet. If you use an earlier version of IdentityServer, the workshop is still relevant, because many of the core concepts are the same. ### Prerequisites - A basic understanding of OAuth, OpenID Connect, IdentityServer and ASP.NET Core, like what is covered in the [Introduction to IdentityServer and OpenID Connect](https://tn-data.se/courses/introduction-to-identityserver-and-openid-connect/) workshop - Good C# skills - Basic Git skills ### What You Need - A laptop that can run several instances of Visual Studio, and at least one large monitor - Visual Studio 2026 or later - No cloud or container experience; the workshop uses them, but they are not its focus The workshop uses ASP.NET Core 10 and Duende IdentityServer 7.x. ### Workshop Agenda During the workshop, we cover the following topics. - Configuration - HTTPS certificates - Security - Logging - Duende IdentityServer - Error handling - Securing the client - Data Protection API - Public/Private key encryption - Keys, certificates, and PKCS 12 files - Creating JWT signing keys using OpenSSL - Token signing keys - IdentityServer and the database - User management - Tokens and claims - Securing the API - Consuming the API - Refresh tokens - Extending IdentityServer - Performance and service resiliency - Troubleshooting IdentityServer ### Resources - [My introductory guide to OpenID Connect](https://tn-data.se/openid-connect/) and its authentication flows. - [My IdentityServer services](https://tn-data.se/duende-identityserver-consulting-services/): how I can help you build authentication and authorization solutions for your needs. ### Video Courses on Dometrain Do you want to learn the fundamentals on your own, at your own pace? I have two video courses on Dometrain: [![Getting Started: OpenID Connect, the course cover on Dometrain](https://tn-data.se/_astro/getting-started-openid-connect-thumbnail.BKepI2R0_Z10O631.webp)](https://tn-data.se/courses/getting-started-openid-connect/) **[Getting Started: OpenID Connect](https://tn-data.se/courses/getting-started-openid-connect/)** OAuth and OpenID Connect at the protocol level, including tokens, signing and the flows. It works whatever language or platform you use. [![Getting Started: Authentication and Authorization in .NET, the course cover on Dometrain](https://tn-data.se/_astro/getting-started-authentication-and-authorization-in-dotnet-thumbnail.CZ0_PMy1_Z2lFmgK.webp)](https://tn-data.se/courses/getting-started-authentication-and-authorization-in-dotnet/) **[Getting Started: Authentication and Authorization in .NET](https://tn-data.se/courses/getting-started-authentication-and-authorization-in-dotnet/)** What happens inside ASP.NET Core when a user signs in, from the authentication middleware and cookies to authorization. ### About the Trainer My name is [Tore Nestenius](https://tn-data.se/about/). I teach on-site and remotely, both directly for companies and through training companies in Europe. What I bring: - I have trained developers since 2010 and taught several hundred courses and talks. - I create, maintain and teach every course myself, and improve it after every delivery. - I am a Microsoft .NET MVP. - I am the author of two video courses on [Dometrain](https://dometrain.com/author/tore-nestenius/), on authentication and authorization in .NET and on OpenID Connect. - I speak at conferences such as NDC, Øredev and Swetugg. - I co-founded [Edument](https://www.edument.se/), a Swedish training and consulting company, where I was CTO, developer and trainer. - I work as an [independent senior .NET consultant](https://tn-data.se/consulting/), so I teach from real projects. - I have worked as a developer for more than 25 years, and with .NET since it launched in 2002. - I co-founded the [.NET Skåne](https://www.meetup.com/net-skane/) user group. ![Tore Nestenius teaching a course](https://tn-data.se/_astro/Tore-in-action-1.6Zvr4mPb_10GDS1.webp) ### Training FAQs #### Do you provide both on-site and remote training classes? Yes, I provide both on-site and remote types of training. #### Do you provide training in both Swedish and English? Yes, both Swedish and English are available. All my course materials are in English and I can teach the class in either Swedish or English. #### Do you do half-day training? For remote training, I have options for both half and full days. When I run training on-site, I usually do full-day classes. #### Do you do webinars and shorter talks? Yes, please visit my [Talks](https://tn-data.se/talks/) page for more details.