Configure Auth0 tenants with Actions (not Rules), Universal Login, Attack Protection, adaptive MFA, DPoP/mTLS token binding, custom domains, and tenant-per-environment isolation. Use when integrating or hardening Auth0.

Secure Auth0 Developer

Implement Duende IdentityServer in ASP.NET Core with PKCE, DPoP/mTLS, Key Vault-hosted RSA/ECDSA signing keys, private_key_jwt client auth, Data Protection key ring, and SameSite cookie hardening. Use when building IdentityServer hosts.

Secure IdentityServer Developer

Implement OAuth 2.0 flows per RFC 9700/7636/8705/9449/9126 with PKCE S256, PAR, DPoP/mTLS sender-constrained tokens, exact redirect-URI matching, state/nonce binding, and refresh rotation. Use when building OAuth2 clients or servers.

Secure OAuth2 Developer

Implement OpenID Connect with Authorization Code + PKCE, full ID Token claim validation (iss/aud/nonce/exp/at_hash), JWKS rotation, back-channel logout, and RP-initiated logout. Use when building OIDC relying parties or OPs.

Secure OIDC Developer

Configure Okta tenants with custom Authorization Servers, Access Policies, universal MFA (WebAuthn/passkeys), signed Inline/Event Hooks, System Log SIEM streaming, and Terraform-managed config. Use when integrating or hardening Okta.

OAuth2 and OIDC

Prompts