Articles

Quick Start Open.IdentityServer SSO with Management Console

Do you want to create a Single Sign-On (SSO) solution based on Open.IdentityServer? Do you want a management UI for managing users and IdentityServer configuration? Then look no further; our Open.IdentityServer & AdminUI code template will have you up and running in less than 15 minutes.

Nacho Escrig

•

Job Role

Software Developer

Free Open Source IdentityServer, Forever.

Having been part of the IdentityServer ecosystem for over a decade, we now feel it's the right time to offer .NET developers a free, forever IdentityServer SDK. Read this article to know more about why.

Kieran Odinius

•

Job Role

Head of Sales

Interop issue with 1Password and .NET 10 Passkeys

Interop issue with 1Password and .NET 10 Passkey implementation. The JSON serializer is very strict, causing 1Password Passkeys to fail to authenticate. See how to fix it.

Andrew Clymer

•

Job Role

Managing Director

Managing your IdentityServer configuration with AI

AdminUI 12.0 allows you to manage your IdentityServer configuration using natural language, using the Model Context Protocol client and a Large Language Model of your choice.

Andrew Clymer

•

Job Role

Managing Director

Helping to move from per customer on-premise solution to multi tenanted SaaS

How we helped XnLeisure on their journey from an on-premise solution to a multi-tenanted SaaS solution, in a multi-phased approach.

Andrew Clymer

•

Job Role

Managing Director

Standards Based Authorization with AuthZen for Dot Net

For decades, identity has been standardised through protocols like SAML and OpenID Connec, but fine-grained authorisation has lagged behind. AuthZen, a new OpenID Foundation standard, aims to change that by enabling centralised access decisions. Rock Solid Knowledge has been involved in shaping AuthZen and now offers a free, open-source .NET library to help developers integrate with any AuthZen compatible authorisation engine.

Andrew Clymer

•

Job Role

Managing Director

How to have consistent Frontend and Backend Authorization for Applications

How we streamlined a single-page application + API to use a common authorization policy from both UI and API, using AuthZen for GS1

Andrew Clymer

•

Job Role

Managing Director

Modernising Single Sign-On for PitPatPet

A case study on how we helped a Pet technology company upgrade their SSO solution, with no down time

Andrew Clymer

•

Job Role

Managing Director

Upgrading an International Manufacturer from IdentityServer4 to Duende

A case study on helping Nailor transition from legacy identity infrastructure to a supported, future‑proof authentication platform.

Andrew Clymer

•

Job Role

Managing Director

Run IdentityServer and AdminUI With Aspire

Aspire brings powerful tools to streamline development and enhance your project’s capabilities. But how can you implement it in your identity solution?

Nacho Escrig

•

Job Role

Software Developer

External AuthZ Policy for Zuplo API Gateway

How to use Zuplo API Gateway to protect your HTTP API using an external Policy Decision Point

Jerrie Pelser

Two Factor SMS is Dead

Andrew Clymer

•

Job Role

Managing Director

Enforcer 5.0 Is Here: Smarter Authorization, Now AuthZen-Ready

Patrick Allwood

Inclusive, Secure, and Verified: The Future of Digital Identity Verification

Andrew Clymer

•

Job Role

Managing Director

Why Passkeys are the Future of Accessible Authentication

SCIM Cursor Pagination

Implementation of the draft-ietf-scim-cursor-pagination-05

Andrew Clymer

•

Job Role

Managing Director

FIPS and FIDO2/Passkeys

V4.0 of our FIDO2/Passkey component uses a FIPS 140-3 certified cryptographic module.

Andrew Clymer

•

Job Role

Managing Director

Moving your AdminUI All-in-one Template into Production

Moving your local Single-Sign-On (SSO) solution onto production can be scary, but with this essential configuration, you will be on the right track.

Nacho Escrig

•

Job Role

Software Developer

Mitigate Phishing Attacks

What is a Phishing attack? What can organizations do to prevent phishing attacks? How does EvilJinx and FIDO come into play?

Kevin Jones

•

Job Role

Consultant

Don't Use Claims for Authorization

When discussing security, we often divide it into two parts: authentication and authorization. So, what's the difference between the two? When should I be using a claim, and why shouldn't i use it to drive policy?

Kevin Jones

•

Job Role

Consultant

Writing Authorization Policy Just Got Easier

Enforcer 3.0 makes it even easier to develop and maintain authorization policy written in ALFA. The 3.0 release enhances the IDE experience, providing tools such as rename, goto definition and find all references

Andrew Clymer

•

Job Role

Managing Director