identityserver-dcr
Configuring Dynamic Client Registration (DCR) in Duende IdentityServer: endpoint setup, authorization policies, custom validation with DynamicClientRegistrationValidator, software statement validation, IClientConfigurationStore, and separate DCR hosting.
Install
With your agent
Install OMGSkills skill "duendesoftware/duende-skills:skills/identityserver-dcr" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/DuendeSoftware/duende-skills /tmp/duende-skills && ln -s /tmp/duende-skills/skills/identityserver-dcr ~/.claude/skills/identityserver-dcrFrom README
Dynamic Client Registration (DCR) When to Use This Skill Setting up Dynamic Client Registration (DCR) at /connect/dcr Securing the DCR endpoint with authorization policies Customizing DCR validation with DynamicClientRegistrationValidator Implementing software statement validation Persisting dynamically registered clients with IClientConfigurationStore Hosting DCR in a separate application from IdentityServer Core Principles DCR requires the Duende.IdentityServer.Configuration NuGet package Requires Business Edition or higher license Always secure the /connect/dcr endpoint with an authorization policy — never expose it unauthenticated Enforce PKCE and restrict allowed grant types in the DCR validator Use persistent stores (database) for dynamically registered clients in production Docs: https://docs.duendesoftware.com/identityserver/configuration/dcr Overview Dynamic Client Registration allows clients to register themselves at the /connect/dcr endpoint per RFC 7591.
More from this repo
aspnetcore-authentication
ASP.NET Core authentication middleware configuration including OpenID Connect, JWT Bearer, cookie authentication,...
aspnetcore-authorization
ASP.NET Core authorization patterns including policy-based authorization, IAuthorizationHandler implementations,...
claims-authorization
Claims transformation and profile service patterns for Duende IdentityServer — IProfileService, IClaimsTransformation,...