惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

量子位
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
WordPress大学
WordPress大学
G
Google Developers Blog
博客园 - 三生石上(FineUI控件)
Last Week in AI
Last Week in AI
IT之家
IT之家
博客园_首页
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
爱范儿
爱范儿
大猫的无限游戏
大猫的无限游戏
博客园 - Franky
U
Unit 42
Security Archives - TechRepublic
Security Archives - TechRepublic
C
Cisco Blogs
S
Schneier on Security
T
Threatpost
阮一峰的网络日志
阮一峰的网络日志
Microsoft Security Blog
Microsoft Security Blog
The Cloudflare Blog
博客园 - 聂微东
C
Cybersecurity and Infrastructure Security Agency CISA
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
Blog — PlanetScale
Blog — PlanetScale
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
Engineering at Meta
Engineering at Meta
M
MIT News - Artificial intelligence
aimingoo的专栏
aimingoo的专栏
博客园 - 叶小钗
Cisco Talos Blog
Cisco Talos Blog
P
Palo Alto Networks Blog
MongoDB | Blog
MongoDB | Blog
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
V
V2EX
L
Lohrmann on Cybersecurity
Latest news
Latest news
小众软件
小众软件
有赞技术团队
有赞技术团队
Know Your Adversary
Know Your Adversary
Simon Willison's Weblog
Simon Willison's Weblog
B
Blog
雷峰网
雷峰网
K
Kaspersky official blog
美团技术团队
D
Darknet – Hacking Tools, Hacker News & Cyber Security
C
Check Point Blog
Recorded Future
Recorded Future
博客园 - 【当耐特】
Microsoft Azure Blog
Microsoft Azure Blog
H
Help Net Security

Duende Software Official Site

Duende Software Duende Software Duende Software Duende Software Duende Software Stop AI Bots from Wasting Your Server How Duende IdentityServer Filters Claims (And Why It Matters) Core vs Extended Protocols in Duende IdentityServer v8: What You Get and When You Need More Your IdentityServer v8 Upgrade Checklist: A Quick Pre-Flight Guide Setting Up SAML Single Sign-On in ASP.NET with Duende IdentityServer Your Identity, Your Terms: Duende's Modular Identity Infrastructure and v8.x Release Duende Spring Launch '26: Identity Infrastructure That Expands With You SAML and OpenID Connect (OIDC): Coexistence, Not Competition The 9 Components of SAML You Need to Know, Ranked by Importance The Cost of NOT Implementing Financial-Grade Security Token Issuer Isolation: Why It Matters for Security and Compliance The Composable Identity Pattern: Build What You Need, Skip What You Don't Multi-Brand Identity: When Your Company Needs More Than One Face Post-Quantum Cryptography in .NET 10: A Practical Guide The field Keyword in C# 14: Write Less, Validate More The Real Cost of Build vs. Buy for Identity OAuth 2.1 Made Simple: The Only Flows You Need Beyond localhost: Multi-Instance ASP.NET Core Deployment with .NET 10 Harden Your .NET JSON Deserialization with System.Text.Json and JsonSerializerOptions.Strict ASP.NET Core Cookie Size Limits in Production: Causes and Fixes The Emergency Stop Button - Implementing Immediate Token Revocation in .NET 10 The 2025 OWASP Top 10 and IdentityServer Update Guidance for CVE-2026-40372 - ASP.NET Data Protection Why a Standard JWT Access Token Matters The Identity Governance Checklist You Wish You Had Six Months Ago The History and Future of SAML: Why a 20-Year-Old Protocol Still Matters The Cookie Apocalypse Already Happened Verify - Open Source Sponsorship Why Identity Is Infrastructure, Not a Feature Extending Duende IdentityServer Server-Side Sessions with Dynamic User Metadata Give Your AI Coding Assistant Duende Expertise with Agent Skills and MCP Server Triggering User Registration via OpenID Connect with Duende IdentityServer Improving .NET Security Code with C# 14 Property Extensions Developing Audit Logs with Duende IdentityServer Events Patch Releases: Addressing CVE-2026-26127 in Microsoft.BCL.Memory Client-Initiated Backchannel Authentication (CIBA) in ASP.NET Core 10 with Duende Identity Server Rate Limiting IdentityServer Endpoints It's Probably DNS - Can You Dig It? Security Lingo Explained: Encode vs Encrypt vs Hash Implementing Zero Trust with Resource Isolation Security Lingo Explained: JWT DPoP Security for .NET APIs with JwtBearer Extensions v1.0.0 Announcing the Duende IdentityServer4 Migration Analysis Tool BenchmarkDotNet - Open Source Sponsorship Security Lingo Explained: PAR Why Signing Key Rotation Matters in OpenID Connect and Duende IdentityServer Security Lingo Explained: OP Duende Year-End Review 2025 Security Lingo Explained: BCP Security Lingo Explained: DPoP Security Lingo Explained: Auth Secure frontend apps with the BFF Pattern Scaling with Duende IdentityServer, MCP, and AI Duende IdentityServer v7.4 is now available Duende BFFv4 is now available Securing OpenAPI and Swagger UI with OAuth in .NET 10 Building a Federation Gateway with Duende IdentityServer: Strategies and Considerations for Identity Orchestration
Duende Software
Maarten Balliauw · 2026-06-25 · via Duende Software Official Site
Summary: Duende support is tiered (Community, Priority, Premium) and is specifically focused on product configuration, troubleshooting, feature guidance, and upgrades for Duende IdentityServer and related packages. Engage one of Duende’s consulting partners for custom coding and further consultancy.

Wondering whether your question falls under product support, or whether you need a consultant? The engineers who built Duende IdentityServer answer your support questions directly, and that’s a line we want to protect. Here’s where the boundary is and how to get the right help either way.

Three Levels of Support

Every Duende license includes some form of support. The level depends on your tier. Here’s how the tiers compare:

Support Level Community Priority Priority Premium

Applicable Licenses

Community, Lite, Starter (legacy), Business (legacy)

Standard

Advanced

Custom, Enterprise+ (legacy)

Support Channel

Public GitHub forum

Dedicated email

Dedicated email

Dedicated email + TAM

Response SLA

No SLA

2 business days

2 business days

1 business day

Escalation Calls

2 per year

4 per year

4 per year

Dedicated TAM

Named TAM

Proactive Check-ins

Security Notification Service

Feature Requests

Public GitHub forum

Email channel

Email channel

Via TAM

Support for Duende open-source packages

For folks looking for consulting services, please stay tuned for later in the post to learn more.

Community Support

Available with: Community, Lite, and legacy Starter and Business licenses

Community support happens in public through our developer community forum on GitHub. You’ll get help from other Duende users and from our team, who actively participate in discussions. Ask questions, share solutions, or request features directly in the open.

Priority Support

Available with: Standard, Advanced, and legacy Enterprise licenses

Priority Support provides direct access to the Duende team through a dedicated email channel, with guaranteed response times tied to your license tier. For complex issues requiring deeper investigation, escalation calls are available – a focused video session where our team works alongside yours to diagnose and resolve product issues.

Premium Support

Available with: Custom, Enterprise+ (legacy)

Premium Support is designed for organizations with mission-critical or complex identity infrastructure where downtime presents significant business risk. It provides the benefits of Priority Support alongside a dedicated, proactive, and high-touch engagement model. This tier offers enhanced strategic continuity and the quickest guaranteed response times.

It also provides you with:

  • Dedicated Technical Account Manager (TAM): A named point of contact who develops deep familiarity with your implementation, architecture, and business needs, bringing continuity and context to every conversation.
  • 1 Business Day SLA Response: Guaranteed response window for issue acknowledgement within 1 business day.
  • Priority Escalation: Elevated priority for escalation calls, ensuring urgent scheduling of video pairing sessions.
  • Proactive Engagement: Your TAM checks in periodically to review upcoming releases, flag breaking changes, and help you utilize new capabilities.

What Product Support Covers

Duende support is focused on our products. That means we’re here to help you with:

  • Configuration and setup of Duende IdentityServer, Duende BFF Security Framework, and related packages
  • Troubleshooting product behavior, whether something is a bug, a misconfiguration, or working as designed
  • Feature and API guidance, like how to use IProfileService, configure Pushed Authorization Requests, or set up server-side sessions
  • Documentation clarification when something isn’t clear or seems incomplete
  • Upgrades and migrations, including moving from IdentityServer4 to Duende IdentityServer or upgrading between versions
  • Protocol questions related to product features, such as “Why isn’t my refresh token rotation working?” or “How do I enable DPoP for this client?”

If your question starts with “How do I configure...” or “Is this behavior expected when I...”, you’re solidly in product support territory.

What Falls Outside Product Support

Product support doesn’t cover architectural design, custom code implementation, or solution review. Questions like these fall outside the scope:

  • “Should we use Duende BFF Security Framework or call the API directly from our SPA?”
  • “Can you review our application and authentication architecture and tell us if it’s correct?”
  • “We wrote a custom grant validator. Can you debug it for us?”
  • “What’s the best way to structure our multi-tenant identity system?”

These are consulting questions. They require understanding your specific environment, your business requirements, and your codebase. That’s a different kind of engagement than product support.

While we offer escalation calls for certain tiers, there should not be an expectation that this is a hotline or emergency support system for production. You are responsible for the operation and maintenance of your environments.

We understand this can be a gray area. There’s a natural spectrum between “How do I configure X?” and “Can you validate our entire auth architecture?” We’ll always be transparent when a conversation starts to cross that line, and we reserve the right to make that call. Our goal isn’t to be gatekeepers. It’s to make sure you get the right kind of help, from the right people, with the right context.

Getting the Most From Support

A few practical tips to help us help you faster:

  1. Be specific. Include the product version, the behavior you expected, and the behavior you observed. Stack traces and configuration snippets save everyone time.
  2. Isolate the problem. If you can reproduce the issue in a minimal project, we can often turn around an answer in a single reply.
  3. Check the docs and forums first. Many common questions are already answered in our documentation or community discussions. You might find your answer faster than waiting for a reply.

When You Need More, Let Us Introduce Our Partners

When a question turns into an architectural review, an implementation engagement, or a code audit, that’s consulting work. We work with a global network of trusted partners who specialize in exactly that kind of engagement.

These partners know Duende products deeply. They can dig into your codebase, review your architecture, and give you specific answers that product support can’t.

If you’re building something complex and want an experienced set of eyes on your identity implementation, any of these partners can get you started.

The Right Help, From the Right People

Clear boundaries on the scope of support aren’t about saying no. They’re about making sure every question gets the attention it deserves, from someone with the right context to answer it well. Every licensing tier includes a direct line to the engineers who built the product, which means fewer unresolved issues and faster answers when it matters.

For product questions, we’re here. For architecture and implementation consulting, our partners are ready. Either way, you’re covered.

Ready to open a support ticket? Check your tier and response times. Looking for implementation help? Find a Duende partner.