---
title: "IdentityServer Consulting and Training"
description: "I help .NET teams set up, upgrade, review and troubleshoot Duende IdentityServer, and I teach the foundations it builds on."
url: https://tn-data.se/duende-identityserver-consulting-services/
type: page
lang: en
alternate: https://tn-data.se/sv/duende-identityserver-konsult.md
site: https://tn-data.se/
---

# IdentityServer Consulting and Training

> I help .NET teams set up, upgrade and fix Duende IdentityServer, and I teach it.

[Duende IdentityServer](https://duendesoftware.com/) is a framework for building your own OpenID Connect and OAuth server in ASP.NET Core. I am a Microsoft .NET MVP.

## IdentityServer consulting

Typical work:

- New setups: designing and configuring IdentityServer for your clients, APIs and users.
- Upgrades from IdentityServer4 to the current Duende IdentityServer.
- Reviews of existing setups: configuration, clients, scopes and resources, token lifetimes and security hardening.
- Troubleshooting: login loops, missing claims, cookie and token problems, including setups in Docker or behind a reverse proxy.
- BFF: securing single-page apps with the Backend for Frontend pattern and the Duende BFF library.

I can work hands-on in your code, or as an advisor who reviews the solution and guides your team.

![A digital shield on a circuit board.](https://tn-data.se/_astro/8.BHei7mgc_Y2izE.webp)

## IdentityServer training

I teach the foundations IdentityServer builds on, as on-site or remote workshops:

- [Introduction to OpenID Connect and OAuth](https://tn-data.se/courses/introduction-to-openid-connect-and-oauth/), 1 day: flows, tokens, scopes and claims at the protocol level
- [Web Security Fundamentals](https://tn-data.se/courses/web-security-fundamentals/), 2 days: defending web applications against XSS, CSRF and injection

For self-paced learning, I have two Dometrain courses: [Getting Started: OpenID Connect](https://tn-data.se/courses/getting-started-openid-connect/) and [Getting Started: Authentication and Authorization in .NET](https://tn-data.se/courses/getting-started-authentication-and-authorization-in-dotnet/).

![Tore Nestenius presenting about authentication at the Copenhagen .NET User Group](https://tn-data.se/_astro/IMG_2248_png-1024x768.DQALO81k_Z1YJ5Fx.webp)

## Duende livestream

Want to learn the fundamentals of authentication in .NET? Watch [Demystifying Authentication in ASP.NET Core](https://duendesoftware.com/webinars/demystifying-authentication-asp-dot-net-core), the livestream I did with [Duende Software](https://duendesoftware.com/).

![Duende livestream: Demystifying Authentication in ASP.NET Core with Tore Nestenius](https://tn-data.se/_astro/duende-live-stream.VisRGvIu_73x0M.webp)

## Read more

- [OpenID Connect for Developers](https://tn-data.se/openid-connect/), my guide to OpenID Connect and OAuth
- [Duende IdentityServer 7: A Complete Setup Guide for ASP.NET Core](https://nestenius.se/net/duende-identityserver-7-a-complete-setup-guide-for-asp-net-core/)
- [IdentityServer - IdentityResource vs. ApiResource vs. ApiScope](https://nestenius.se/net/identityserver-identityresource-vs-apiresource-vs-apiscope/)
- [IdentityServer in Docker Containers](https://nestenius.se/net/identityserver-in-docker-containers-part-1/), a four-part series
- [Implementing the BFF Pattern in ASP.NET Core for SPAs](https://nestenius.se/net/implementing-bff-pattern-in-asp-net-core-for-spas/), the first part of my BFF series

The first step is a short call or meeting, with no obligation, so I can understand your setup. [Contact me](https://tn-data.se/contact/) to set one up.

## Frequently asked questions

**Can you help us upgrade from IdentityServer4?**

Yes. IdentityServer4 is no longer maintained, so moving to Duende IdentityServer is worth doing. I can plan the upgrade with your team, do the work, or review it as you go.

**Do we need a licence for Duende IdentityServer?**

For most production use, yes. Duende IdentityServer is a commercial product with several licence tiers, and there is a free Community Edition for smaller organisations. See [Duende’s product page](https://duendesoftware.com/products/identityserver) for the details.

**Can you review our existing IdentityServer setup?**

Yes. I go through the configuration, clients, scopes, token lifetimes and how your applications use it. You get a list of findings with suggested fixes.

**Do you work remotely?**

Yes, most IdentityServer work can be done remotely. I’m based in Göteborg and can also work on-site, in Sweden or abroad.