Skill UI

A guide for building secure, scalable, and robust authentication and authorization systems. This skill covers industry-standard practices, including OAuth2, JWT, OIDC, RBAC, and session management, helping developers design secure APIs and identity infrastructure.

A guide for building secure, scalable, and robust authentication and authorization systems. This skill covers industry-standard practices, including OAuth2, JWT, OIDC, RBAC, and session management, helping developers design secure APIs and identity infrastructure.

The official Azure Identity SDK for .NET, providing robust and flexible authentication for Azure SDK clients using Microsoft Entra ID. It simplifies secure credential management by supporting various methods, including Managed Identity, Service Principals, and the recommended DefaultAzureCredential, which automatically handles authentication across different environments (local, staging, production).

The official Azure Identity SDK for .NET, providing robust and flexible authentication for Azure SDK clients using Microsoft Entra ID. It simplifies secure credential management by supporting various methods, including Managed Identity, Service Principals, and the recommended DefaultAzureCredential, which automatically handles authentication across different environments (local, staging, production).

This guide provides comprehensive instructions for setting up and managing Sentry's enterprise-grade Role-Based Access Control (RBAC). It covers establishing the Organization-Team-Project hierarchy, integrating Single Sign-On (SSO) via SAML2, and automating user provisioning with SCIM. Use this when setting up large-scale organizations, enforcing granular team permissions, centralizing identity management, or ensuring regulatory compliance and audit logging.

This skill facilitates the configuration and management of Single Sign-On (SSO) for Windsurf enterprise deployments. It supports industry-standard protocols like SAML 2.0 and OIDC/OAuth 2.0, allowing seamless identity integration with major providers such as Okta, Azure AD, and Google Workspace. Essential for administrators implementing centralized, secure enterprise authentication.

This guide outlines how to implement Google Cloud Identity-Aware Proxy (IAP) to enforce zero-trust, identity-based access control across various Google Cloud services (App Engine, Cloud Run, GKE, Compute Engine). It details configuring per-request authentication, context-aware policies (like device posture and location), and programmatic access management for highly secure internal applications.

A comprehensive guide to configuring secure OAuth 2.0 authorization flows, covering best practices for Authorization Code with PKCE, Client Credentials, and Device Authorization Grant. Learn how to implement mandatory security controls, manage token lifecycles, and align with OAuth 2.1 standards to build robust identity and access management systems.

This guide details the implementation of Microsoft Entra Privileged Identity Management (PIM), enforcing Just-in-Time (JIT) role activation, mandatory approval workflows, and periodic access reviews for critical Azure AD and resource roles. It aligns with Zero Trust principles by eliminating standing privileges.

Configure Azure AD Privileged Identity Management via Microsoft Graph API to enumerate eligible and active assignments, request just-in-time activations, audit logs, and enforce MFA or approval policies for zero-trust privileged access scenarios.

A comprehensive guide for implementing SAML 2.0 Single Sign-On (SSO) using Okta as the Identity Provider (IdP). This skill covers end-to-end configuration, including SP-initiated and IdP-initiated flows, secure attribute mapping, advanced certificate management (SHA-256, AES-256), and security hardening practices required for enterprise-grade identity access management (IAM) deployments. Learn to establish robust and compliant authentication architecture.

This skill guide details how to build a robust, SCIM 2.0-compliant API endpoint to manage user identities automatically. It focuses on integrating this API with Okta as an Identity Provider (IdP), enabling automated provisioning, deprovisioning, and attribute synchronization for seamless user lifecycle management in enterprise environments.