Support & Issues
This document provides information on accessing Duende’s source code, issue tracking, and community forums for support and discussions. It also outlines support policies, including priority support for enterprise users, and the procedure to report security vulnerabilities.
Source Code
Section titled “Source Code”You can find all source code for Duende Products and its supporting repos in our organization.
Issue Tracker
Section titled “Issue Tracker”Join our developer community forum to ask questions and discuss potential bugs.
Follow our product releases and get notified of new releases as soon as they are published.
Support
Section titled “Support”Duende Software offers three support tiers designed to meet organizations at their stage of growth and operational complexity. Each tier builds on the last, providing a clear path from community-driven help to dedicated, high-touch engagement for mission-critical deployments.
| Support Tier Comparison | ||||
|---|---|---|---|---|
| Support Level | Community | Priority | Priority | Premium |
| Applicable Licenses | Community, Lite, Starter (legacy), Business (legacy) | Standard | Advanced | Custom, Enterprise+ (legacy) |
| Support Channel | Public GitHub forum | Dedicated email | Dedicated email | Dedicated email + TAM |
| Response SLA | No SLA | 2 business days | 2 business days | 1 business day |
| Escalation Calls | – | 2 per year | 4 per year | 4 per year |
| Dedicated TAM | – | – | – | Named TAM |
| Proactive Check-ins | – | – | – | ✓ |
| Security Notification Service | – | – | ✓ | ✓ |
| Feature Requests | Public GitHub forum | Email channel | Email channel | Via TAM |
| Support for Duende open-source packages | – | – | – | ✓ |
Community Support
Section titled “Community Support”License: Free, Community, Lite, Starter (legacy), Business (legacy)
Community Support connects users with a network of fellow developers and Duende team members through our public discussion forums. Whether you’re troubleshooting an integration, exploring a new feature, or looking to share knowledge, the community is an active and knowledgeable resource.
To get help, start a discussion on the developer community forum.
| Community Support Overview | |
|---|---|
| Support Channel | Public developer community forum |
| SLA | None |
Priority Support
Section titled “Priority Support”License: Standard, Advanced, Enterprise (legacy)
Priority Support provides direct access to the Duende team through a dedicated email channel, with guaranteed response times tied to your license tier. For complex issues requiring deeper investigation, escalation calls are available – a focused video session where our team works alongside yours to diagnose and resolve product issues.
| Priority Support Overview | ||
|---|---|---|
| License | Standard | Advanced, Enterprise (legacy) |
| Support Channel | Dedicated email channel | Dedicated email channel |
| Response SLA | 2 business day response | 2 business day response |
| Escalation Calls | Up to 2 escalations per year | Up to 4 escalations per year |
Note: Escalation calls are development-focused pairing sessions, not ongoing operational support or on-call coverage. Response times are measured against standard US business days. Observed holidays and other events are excluded.
Premium Support
Section titled “Premium Support”License: Standard, Advanced, Custom, Enterprise (legacy)
Premium Support is designed for organizations with mission-critical or complex identity infrastructure where downtime presents significant business risk. It provides the benefits of Priority Support alongside a dedicated, proactive, and high-touch engagement model. This tier offers enhanced strategic continuity and the quickest guaranteed response times.
Dedicated Technical Account Manager (TAM): Your TAM serves as a named point of contact who develops deep familiarity with your implementation, architecture, and business needs. Rather than re-explaining your environment with every interaction, your TAM brings continuity and context to every conversation, whether you’re onboarding, upgrading, or troubleshooting.
1 Business Day SLA Response: Issues are acknowledged within 1 business day. This ensures a guaranteed response window regardless of when a problem surfaces, which is vital for organizations where swift acknowledgement is critical.
Priority Escalation: Premium customers receive elevated priority for escalation calls, ensuring video pairing sessions are scheduled with urgency rather than standard queue prioritization.
Proactive Engagement: Your TAM will periodically check in to review upcoming releases, flag breaking changes relevant to your configuration, and ensure you’re positioned to take advantage of new capabilities before they become blockers.
| Premium Support Overview | |
|---|---|
| Support Channel | Dedicated email channel + Named Technical Account Manager |
| SLA | 1 business day response |
| Escalation Calls | Up to 4 per year, priority scheduling |
| Account Manager | Named TAM with deep familiarity of your environment |
| Proactive Engagement | Periodic check-ins, release reviews, breaking change alerts |
| Support for Duende open-source packages | Included |
Supported Versions
Section titled “Supported Versions”Duende differentiates between two categories of NuGet packages: Product packages and Component packages.
Product packages are the primary, user-facing products: IdentityServer and BFF. The following support rules apply:
- Major versions are supported until the end of the associated .NET SDK lifecycle. The “associated” .NET version is determined by the target framework(s) supported at the time of release. A package can target multiple .NET versions. For example, if a release ships with support for both .NET 8 and .NET 10, it is associated with both, and support continues until the last associated .NET version reaches end-of-life.
- Minor versions receive security fixes until the end of the associated .NET SDK lifecycle.
- Product packages do not follow Semantic Versioning (SemVer); minor releases may contain breaking API changes.
Component packages are transitive dependencies and supporting libraries, such as User Management, Storage, Jobs, and similar packages. The following support rules apply:
- The current major and minor versions are supported for both bug fixes and security fixes.
- Component packages follow Semantic Versioning (SemVer).
The following sections track release and end of support dates for Duende product packages.
Duende IdentityServer
Section titled “Duende IdentityServer”Duende IdentityServer v8
| Version | Release Date | Supported .NET Platforms | Support End-of-Life |
|---|---|---|---|
| 8.0 | June 2, 2026 | .NET 10 | November 14, 2028 |
Duende IdentityServer v7
| Version | Release Date | Supported .NET Platforms | Support End-of-Life |
|---|---|---|---|
| 7.4 | December 2, 2025 | .NET 10 | November 14, 2028 |
| .NET 9 | November 10, 2026 | ||
| .NET 8 | November 10, 2026 | ||
| 7.3 | August 14, 2025 | .NET 9 | November 10, 2026 |
| .NET 8 | November 10, 2026 | ||
| 7.2 | March 18, 2025 | .NET 9 | November 10, 2026 |
| .NET 8 | November 10, 2026 | ||
| 7.1 | January 15, 2025 | .NET 9 | November 10, 2026 |
| .NET 8 | November 10, 2026 | ||
| 7.0 | January 24, 2024 | .NET 8 | November 10, 2026 |
Duende IdentityServer v6
| Version | Release Date | Supported .NET Platforms | Support End-of-Life |
|---|---|---|---|
| 6.3 | May 16, 2023 | .NET 7 | May 14, 2024 |
| .NET 6 | November 12, 2024 | ||
| 6.2 | November 22, 2022 | .NET 7 | May 14, 2024 |
| .NET 6 | November 12, 2024 | ||
| 6.1 | May 20, 2022 | .NET 6 | November 12, 2024 |
| 6.0 | January 13, 2022 | .NET 6 | November 12, 2024 |
Duende IdentityServer v5
| Version | Release Date | Supported .NET Platforms | Support End-of-Life |
|---|---|---|---|
| 5.2 | May 19, 2021 | .NET 5 | May 10, 2022 |
| .NET Core 3.1 | December 13, 2022 | ||
| 5.1 | March 25, 2021 | .NET 5 | May 10, 2022 |
| .NET Core 3.1 | December 13, 2022 | ||
| 5.0 | January 14, 2021 | .NET 5 | May 10, 2022 |
| .NET Core 3.1 | December 13, 2022 |
Duende Backend For Frontend (BFF)
Section titled “Duende Backend For Frontend (BFF)”Duende BFF v4
| Version | Release Date | Supported .NET Platforms | Support End-of-Life |
|---|---|---|---|
| 4.1 | January 29, 2026 | .NET 10 | November 14, 2028 |
| .NET 9 | November 10, 2026 | ||
| .NET 8 | November 10, 2026 | ||
| 4.0 | December 2, 2025 | .NET 10 | November 14, 2028 |
| .NET 9 | November 10, 2026 | ||
| .NET 8 | November 10, 2026 |
Duende BFF v3
| Version | Release Date | Supported .NET Platforms | Support End-of-Life |
|---|---|---|---|
| 3.1 | December 2, 2025 | .NET 10 | November 14, 2028 |
| .NET 9 | November 10, 2026 | ||
| .NET 8 | November 10, 2026 | ||
| 3.0 | March 17, 2025 | .NET 9 | November 10, 2026 |
| .NET 8 | November 10, 2026 |
Duende BFF v2
| Version | Release Date | Supported .NET Platforms | Support End-of-Life |
|---|---|---|---|
| 2.3 | December 20, 2024 | .NET 9 | November 10, 2026 |
| .NET 8 | November 10, 2026 | ||
| 2.2 | April 1, 2024 | .NET 8 | November 10, 2026 |
| .NET 6 | November 12, 2024 | ||
| 2.1 | June 27, 2022 | .NET 6 | November 12, 2024 |
| 2.0 | November 11, 2022 | .NET 6 | November 12, 2024 |
Duende BFF v1
| Version | Release Date | Supported .NET Platforms | Support End-of-Life |
|---|---|---|---|
| 1.2 | April 1, 2022 | .NET 6 | November 12, 2024 |
| .NET 5 | May 10, 2022 | ||
| .NET Core 3.1 | December 13, 2022 | ||
| 1.1 | December 16, 2021 | .NET 6 | November 12, 2024 |
| .NET 5 | May 10, 2022 | ||
| .NET Core 3.1 | December 13, 2022 | ||
| 1.0 | October 24, 2021 | .NET 5 | May 10, 2022 |
| .NET Core 3.1 | December 13, 2022 |
Reporting a security vulnerability
Section titled “Reporting a security vulnerability”Security issues and bugs should be reported privately here. You should receive a response within two business days.