Discussions

• 1 You must be logged in to vote

  💡

  Support for external key creation

  twenzel started Jul 20, 2026 in Feature requests

  

  

  2
• 2 You must be logged in to vote

  #️⃣

  Secure Swagger Configuration

  MH61Aus asked Jul 17, 2026 in IdentityServer · Unanswered

  

  

  5
• 1 You must be logged in to vote

  #️⃣

  Secure Client Authentication with Authorization Code flow

  daver77 asked Jul 13, 2026 in IdentityServer · Answered

  

  

  2
• 1 You must be logged in to vote

  #️⃣

  Issue unprotecting keys

  ADringer asked Jul 14, 2026 in IdentityServer · Unanswered

  

  

  

  

  6
• 2 You must be logged in to vote

  #️⃣

  Bug: DCR endpoint not allowing an absolute_refresh_token_lifetime of 0

  Steve-Smith-Altium asked Jul 14, 2026 in IdentityServer · Answered

  

  

  5
• 1 You must be logged in to vote

  #️⃣

  BFF impersonation feature

  riaadh asked Jul 10, 2026 in BFF · Unanswered

  

  

  1
• 1 You must be logged in to vote

  #️⃣

  ITokenValidator and TokenValidator mismatched nullability in method signature

  zikhan asked Jul 8, 2026 in IdentityServer · Answered

  

  

  1
• 1 You must be logged in to vote

  #️⃣

  Best practice setup for website with user auth and API calling

  daver77 asked Jul 8, 2026 in IdentityServer · Answered

  

  

  1
• 1 You must be logged in to vote

  #️⃣

  Setting DPoPJsonWebKey in AddOpenIdConnectAccessTokenManagement

  daver77 asked Jul 8, 2026 in IdentityServer · Closed · Answered

  

  

  2
• 1 You must be logged in to vote

  #️⃣

  How to limit server side sessions

  0472d asked Jul 3, 2026 in IdentityServer · Unanswered

  

  

  

  

  7
• 1 You must be logged in to vote

  💬

  Blog Feedback - Not Loving The New UI

  MH61Aus started Jun 30, 2026 in General

  

  

  3
• 0 You must be logged in to vote

  📰

  https://duendesoftware.com/blog/20260630-duende-identityserver-production-deployment-checklist

  giscus Bot announced Jun 30, 2026 in Blog

  0
• 1 You must be logged in to vote

  #️⃣

  Standard License Work in .NET 10 but not in .NET 8

  michael-coder76 asked Jun 26, 2026 in IdentityServer · Answered

  

  

  1
• 1 You must be logged in to vote

  #️⃣

  Expiring tomorrow licence

  Utenzo asked Jun 26, 2026 in IdentityServer · Answered

  

  

  2
• 1 You must be logged in to vote

  #️⃣

  BFF failing with invalid grant

  norgie asked May 29, 2026 in BFF · Unanswered

  

  

  5
• 1 You must be logged in to vote

  💡

  Optimize TokenCleanupService with a more efficient delete strategy when IOperationalStoreNotification is not in use

  aomader started Mar 20, 2026 in Feature requests

  

  

  

  

  7
• 1 You must be logged in to vote

  💡

  Allow full HttpResponse control from IAuthorizeInteractionResponseGenerator

  aomader started Mar 20, 2026 in Feature requests

  

  

  3
• 1 You must be logged in to vote

  #️⃣

  Upgrading to Duende.IdentityServer v8 with v7 enterprise license crashes host with exception "Your license does not include the SAML 2.0 Identity Provider feature."

  Priority Priority support (for Duende use)

  omon77 asked Jun 18, 2026 in IdentityServer · Answered

  

  

  4
• 0 You must be logged in to vote

  📔

  identityserver/ui/server-side-sessions/

  giscus Bot announced Jun 18, 2026 in Documentation

  0
• 1 You must be logged in to vote

  #️⃣

  Do ASP.NET Core Identity users authenticated via Duende.IdentityServer.AspNetIdentity count as User Management Users if we are not using Duende User Management?

  thomhurst asked Jun 18, 2026 in IdentityServer · Answered

  

  

  3
• 1 You must be logged in to vote

  #️⃣

  Implicit requirement of Dynamic Identity Providers since v8

  Bug Relates to a (potential) bug

  Cerebellum90 asked Jun 15, 2026 in IdentityServer · Closed · Answered

  

  

  

  

  3
• 1 You must be logged in to vote

  #️⃣

  IdentityServer.EntityFramework 8.0.0 token cleanup requires SamlSigninStates even when SAML is not used

  Follow-up Needs follow-up (for Duende use)

  kilobitbyte asked Jun 11, 2026 in IdentityServer · Unanswered

  

  

  3
• 1 You must be logged in to vote

  #️⃣

  Inquiry About Client Limit for Duende Starter (Standard) License

  sr-athira asked Jun 12, 2026 in IdentityServer · Unanswered

  

  

  1
• 2 You must be logged in to vote

  💡

  Only accept private JWTs for client authentication if their lifetime is shorter than some time t ("fresh tokens")

  Mushroomator started Jun 1, 2026 in Feature requests

  

  

  4
• 2 You must be logged in to vote

  #️⃣

  AddAspNetIdentity duplicates session claims (idp/amr/auth_time/sid) on every SecurityStampValidator refresh → cookie grows unbounded (.NET 10 / IdentityServer 8.0.0)

  Bug Relates to a (potential) bug

  tabro asked Jun 10, 2026 in IdentityServer · Closed · Answered

  

  

  3