Skill UI

This guide provides comprehensive instructions for setting up and managing Sentry's enterprise-grade Role-Based Access Control (RBAC). It covers establishing the Organization-Team-Project hierarchy, integrating Single Sign-On (SSO) via SAML2, and automating user provisioning with SCIM. Use this when setting up large-scale organizations, enforcing granular team permissions, centralizing identity management, or ensuring regulatory compliance and audit logging.

This guide outlines how to implement Google Cloud Identity-Aware Proxy (IAP) to enforce zero-trust, identity-based access control across various Google Cloud services (App Engine, Cloud Run, GKE, Compute Engine). It details configuring per-request authentication, context-aware policies (like device posture and location), and programmatic access management for highly secure internal applications.

A comprehensive guide to configuring secure OAuth 2.0 authorization flows, covering best practices for Authorization Code with PKCE, Client Credentials, and Device Authorization Grant. Learn how to implement mandatory security controls, manage token lifecycles, and align with OAuth 2.1 standards to build robust identity and access management systems.

This guide details the implementation of Microsoft Entra Privileged Identity Management (PIM), enforcing Just-in-Time (JIT) role activation, mandatory approval workflows, and periodic access reviews for critical Azure AD and resource roles. It aligns with Zero Trust principles by eliminating standing privileges.

Configure Azure AD Privileged Identity Management via Microsoft Graph API to enumerate eligible and active assignments, request just-in-time activations, audit logs, and enforce MFA or approval policies for zero-trust privileged access scenarios.

A comprehensive guide for implementing SAML 2.0 Single Sign-On (SSO) using Okta as the Identity Provider (IdP). This skill covers end-to-end configuration, including SP-initiated and IdP-initiated flows, secure attribute mapping, advanced certificate management (SHA-256, AES-256), and security hardening practices required for enterprise-grade identity access management (IAM) deployments. Learn to establish robust and compliant authentication architecture.

This guide details configuring enterprise-grade Role-Based Access Control (RBAC) for Adobe services. It covers integrating Adobe Admin Console with external Identity Providers (Azure AD, Google Workspace) using SCIM provisioning, automating user provisioning via the User Management API (UMAPI), and defining custom product profiles to enforce fine-grained, centralized permissions across the organization.

This skill provides a comprehensive guide and code examples for designing robust and scalable Identity and Access Management (IAM) structures within Oracle Cloud Infrastructure (OCI). It covers establishing secure compartment hierarchies, understanding complex policy inheritance rules, implementing least-privilege access controls, and utilizing dynamic groups for service authentication, ensuring best practices for enterprise cloud governance.

This catalog provides core abstractions and hooks for robust security management in administrative applications. It includes essential tools for handling identity context, user authentication flows (login/logout), and granular authorization checks. Developers can use these components to build secure, feature-rich administrative panels with reliable access control.

This guide serves as the core entry point for comprehensive security testing of identity and access control mechanisms. It is designed to help testers systematically identify vulnerabilities across login flows, session management, object authorization (IDOR), and modern protocols like JWT, OAuth, CORS, and SAML. Use this when planning security audits for any web application with user accounts.