identityserver-sessions-providers
Guide for configuring server-side sessions, session management and querying, inactivity timeout, dynamic identity providers, and CIBA (Client Initiated Backchannel Authentication) in Duende IdentityServer.
Install
With your agent
Install OMGSkills skill "duendesoftware/duende-skills:skills/identityserver-sessions-providers" into this agent's normal skills directory: use the OMGSkills MCP get_skill tool, install only the pinned_install commit and path, verify SKILL.md against pinned_install.skill_md_sha, and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/DuendeSoftware/duende-skills /tmp/duende-skills && ln -s /tmp/duende-skills/skills/identityserver-sessions-providers ~/.claude/skills/identityserver-sessions-providers
From README
IdentityServer Sessions, Dynamic Providers, and CIBA When to Use This Skill Enabling and configuring server-side sessions for authentication state management Implementing session querying, revocation, and administrative tooling via ISessionManagementService Configuring inactivity timeout across IdentityServer and client applications Setting up the Entity Framework Core session store or implementing a custom IServerSideSessionStore Adding dynamic identity providers loaded from a database at runtime Implementing custom non-OIDC dynamic provider types (Google, SAML, etc.) Building a CIBA (Client Initiated Backchannel Authentication) flow Understanding edition requirements (Business vs Enterprise) for these features Docs: https://docs.duendesoftware.com/identityserver/ui/server-side-sessions/ Server-Side Sessions What Problem Do They Solve? By default, ASP.NET Core stores all authentication session state in a self-contained cookie.
More from this repo
aspnetcore-authentication
ASP.NET Core authentication middleware configuration including OpenID Connect, JWT Bearer, cookie authentication,...
aspnetcore-authorization
ASP.NET Core authorization patterns including policy-based authorization, IAuthorizationHandler implementations,...
claims-authorization
Claims transformation and profile service patterns for Duende IdentityServer — IProfileService, IClaimsTransformation,...
