IdentityServer Consulting and Training
I help .NET teams set up, upgrade and fix Duende IdentityServer, and I teach it.
Duende IdentityServer is a framework for building your own OpenID Connect and OAuth server in ASP.NET Core. I am a Microsoft .NET MVP.
IdentityServer consulting
Typical work:
- New setups: designing and configuring IdentityServer for your clients, APIs and users.
- Upgrades from IdentityServer4 to the current Duende IdentityServer.
- Reviews of existing setups: configuration, clients, scopes and resources, token lifetimes and security hardening.
- Troubleshooting: login loops, missing claims, cookie and token problems, including setups in Docker or behind a reverse proxy.
- BFF: securing single-page apps with the Backend for Frontend pattern and the Duende BFF library.
I can work hands-on in your code, or as an advisor who reviews the solution and guides your team.
IdentityServer training
I teach the foundations IdentityServer builds on, as on-site or remote workshops:
- Introduction to OpenID Connect and OAuth, 1 day: flows, tokens, scopes and claims at the protocol level
- Web Security Fundamentals, 2 days: defending web applications against XSS, CSRF and injection
For self-paced learning, I have two Dometrain courses: Getting Started: OpenID Connect and Getting Started: Authentication and Authorization in .NET.
Duende livestream
Want to learn the fundamentals of authentication in .NET? Watch Demystifying Authentication in ASP.NET Core, the livestream I did with Duende Software.
Read more
- OpenID Connect for Developers, my guide to OpenID Connect and OAuth
- Duende IdentityServer 7: A Complete Setup Guide for ASP.NET Core
- IdentityServer - IdentityResource vs. ApiResource vs. ApiScope
- IdentityServer in Docker Containers, a four-part series
- Implementing the BFF Pattern in ASP.NET Core for SPAs, the first part of my BFF series
The first step is a short call or meeting, with no obligation, so I can understand your setup. Contact me to set one up.
Frequently asked questions
Can you help us upgrade from IdentityServer4?
Yes. IdentityServer4 is no longer maintained, so moving to Duende IdentityServer is worth doing. I can plan the upgrade with your team, do the work, or review it as you go.
Do we need a licence for Duende IdentityServer?
For most production use, yes. Duende IdentityServer is a commercial product with several licence tiers, and there is a free Community Edition for smaller organisations. See Duende’s product page for the details.
Can you review our existing IdentityServer setup?
Yes. I go through the configuration, clients, scopes, token lifetimes and how your applications use it. You get a list of findings with suggested fixes.
Do you work remotely?
Yes, most IdentityServer work can be done remotely. I’m based in Göteborg and can also work on-site, in Sweden or abroad.