Duende Software Official Site

By replacing Dynamic Client Registration (DCR) with Client ID Metadata Documents (CIMD), the latest MCP specification solves the problem of accumulating orphaned client records on authorization servers.

With a workload identity from Microsoft Entra Workload ID, your microservice running in Azure already has a secure identity out of the box. Managed identities provided by Microsoft Entra ID allow your application to prove its identity without storing a single secret or credential in configuration files.

"Agentic identity" is the label people have settled on for several related questions: how an AI agent authenticates, whose authority it acts under, and how you constrain and audit what it does with that authority. The term is new, but the questions underneath it are mostly familiar. They are the questions OAuth and OpenID Connect (OIDC) have been answering for nearly two decades...

Every developer has hit the same wall: a code sample in the docs that no longer compiles. A method was renamed, a parameter changed, an API was deprecated, and the snippet in the README quietly rotted while nobody was looking. Copy-pasted code samples are documentation debt waiting to happen, and the bigger your docs, the worse it gets. The fix is to stop copying code into docs ...

Authentication tells you who the caller is; it doesn't tell you what they're allowed to do. In this post, we'll use scope-based authorization in .NET 10 Minimal APIs to enforce fine-grained access control using JWTs issued by Duende IdentityServer.