Skill UI

This skill facilitates the configuration and management of Single Sign-On (SSO) for Windsurf enterprise deployments. It supports industry-standard protocols like SAML 2.0 and OIDC/OAuth 2.0, allowing seamless identity integration with major providers such as Okta, Azure AD, and Google Workspace. Essential for administrators implementing centralized, secure enterprise authentication.

This comprehensive guide details how to implement Single Sign-On (SSO) for Google Workspace using the SAML 2.0 protocol. It guides administrators through connecting a third-party Identity Provider (IdP) like Okta or Azure AD to centralize authentication, enforce MFA, and manage access policies across the organization.

A comprehensive guide to securing Kubernetes Role-Based Access Control (RBAC). It teaches best practices for implementing least-privilege policies, eliminating excessive cluster-admin bindings, utilizing namespace-scoped roles, and integrating external identity providers (OIDC) to mitigate risks like privilege escalation and unauthorized data access.

A comprehensive guide for implementing SAML 2.0 Single Sign-On (SSO) using Okta as the Identity Provider (IdP). This skill covers end-to-end configuration, including SP-initiated and IdP-initiated flows, secure attribute mapping, advanced certificate management (SHA-256, AES-256), and security hardening practices required for enterprise-grade identity access management (IAM) deployments. Learn to establish robust and compliant authentication architecture.

This skill guide details how to build a robust, SCIM 2.0-compliant API endpoint to manage user identities automatically. It focuses on integrating this API with Okta as an Identity Provider (IdP), enabling automated provisioning, deprovisioning, and attribute synchronization for seamless user lifecycle management in enterprise environments.

This comprehensive tool assesses critical security flaws in OAuth 2.0 and OpenID Connect (OIDC) implementations. It systematically tests for common vulnerabilities like authorization code interception, redirect URI manipulation, CSRF in OAuth flows, token leakage, and scope escalation. Ideal for penetration testers and security engineers evaluating the robustness of identity providers and client applications.

This guide details configuring enterprise-grade Role-Based Access Control (RBAC) for Adobe services. It covers integrating Adobe Admin Console with external Identity Providers (Azure AD, Google Workspace) using SCIM provisioning, automating user provisioning via the User Management API (UMAPI), and defining custom product profiles to enforce fine-grained, centralized permissions across the organization.

This guide details how to integrate Auth0 as an external Identity Provider (IDP) for Webiny, replacing the default Cognito authentication. It involves creating an API config class to map Auth0's JWT claims to Webiny identities and implementing a React extension component. Users must set environment variables (AUTH0_ISSUER, AUTH0_CLIENT_ID) and register the necessary extensions for successful OIDC authentication flow.

This skill guides developers on integrating Okta as an external Identity Provider (IDP) for Webiny. It replaces default authentication methods (like Cognito) by utilizing the OpenID Connect (OIDC) standard. The process involves setting up an API configuration class to map Okta's JWT claims to Webiny identities, and creating a React extension component to wire the issuer URL, client ID, and configuration path, enabling seamless Single Sign-On (SSO) using Okta.

A comprehensive playbook for testing security flaws in OAuth 2.0 and OpenID Connect (OIDC) implementations. Use this guide to systematically check for misconfigurations in redirect URI handling, state and nonce validation, PKCE enforcement, token audience/issuer checks, and account binding vulnerabilities. Essential for reviewing applications linked to external identity providers.