Duende Skills

Claude Code: /plugin marketplace add anthropics/claude-plugins-official → /plugin install duende-skills@claude-plugins-official

Coverage is deliberately granular: token lifetime, key management, dynamic client registration, SAML, session and store providers, and the backend-for-frontend pattern each get their own file instead of sharing one long identity document. That granularity pays off because most IdentityServer mistakes are configuration-shaped — a client type chosen wrong, a scope modelled as a resource, a refresh token policy that quietly never rotates — and a narrow skill can carry the exact table needed to settle it. Two agents sit above the skills, one for protocol questions and one for the server itself. There is also a v7-to-v8 upgrade skill and an IdentityServer4 migration path, which is where teams on an older .NET stack usually stall.