Duende Software Official Site

Anders Abel, technical partner at Sustainsys, puts it plainly: of all the decisions developers face when hardening Duende IdentityServer, session lifetimes are the ones most likely to be guessed at rather than decided.

We all use passwords, yet we all struggle to remember them. Some people reuse the same password across multiple websites. Others turn to password managers to create unique passwords for every site. Even with excellent personal security hygiene, data breaches and password-related attacks dominate cybersecurity headlines. Sites like HaveIBeenPwned show just how frequently our cred...

Games need player identity. Leaderboards, cloud saves, multiplayer matchmaking, and anti-cheat all depend on knowing who’s playing. Godot 4 with C# gives you access to the full .NET ecosystem, including the same authentication libraries used in web and mobile apps.

It's an exciting time for agentic identity standards. A new Model Context Protocol (MCP) release candidate was just published, and it brings many new features to the protocol. The headline feature of the release is that the protocol is going stateless.

Managing X.509 certificates for SAML is tedious. You track expiration dates, coordinate certificate rollover with service providers, and hope nothing breaks during the transition. What if your SAML signing certificates rotated themselves, just like your OIDC keys?