Skill UI

This skill facilitates the configuration and management of Single Sign-On (SSO) for Windsurf enterprise deployments. It supports industry-standard protocols like SAML 2.0 and OIDC/OAuth 2.0, allowing seamless identity integration with major providers such as Okta, Azure AD, and Google Workspace. Essential for administrators implementing centralized, secure enterprise authentication.

Guide to deploying AWS Verified Access for VPN-less Zero Trust Network Access, covering identity and device trust providers, Cedar policies, resource sharing, and endpoint configuration for secure internal application access.

Step-by-step instructions for using Cloudflare Tunnel and Access policies to expose self-hosted services, configure identity providers, posture checks, and WARP enrollment so teams can replace VPNs with secure zero-trust access.

Guides teams through using Okta as a centralized identity provider across AWS, Azure, and GCP, deploying phishing-resistant MFA, automating SCIM lifecycle provisioning, and enforcing adaptive access policies for secure cloud access.

Performs OAuth 2.0 scope minimization reviews by inventorying service principals, delegated grants, and app role assignments to flag excessive permissions, risky consent patterns, and unused token grants across identity providers and SaaS integrations.

This guide details configuring enterprise-grade Role-Based Access Control (RBAC) for Adobe services. It covers integrating Adobe Admin Console with external Identity Providers (Azure AD, Google Workspace) using SCIM provisioning, automating user provisioning via the User Management API (UMAPI), and defining custom product profiles to enforce fine-grained, centralized permissions across the organization.

This guide details how to integrate Auth0 as an external Identity Provider (IDP) for Webiny, replacing the default Cognito authentication. It involves creating an API config class to map Auth0's JWT claims to Webiny identities and implementing a React extension component. Users must set environment variables (AUTH0_ISSUER, AUTH0_CLIENT_ID) and register the necessary extensions for successful OIDC authentication flow.

This skill guides developers on integrating Okta as an external Identity Provider (IDP) for Webiny. It replaces default authentication methods (like Cognito) by utilizing the OpenID Connect (OIDC) standard. The process involves setting up an API configuration class to map Okta's JWT claims to Webiny identities, and creating a React extension component to wire the issuer URL, client ID, and configuration path, enabling seamless Single Sign-On (SSO) using Okta.