Skill UI

A comprehensive guide for setting up Single Sign-On (SSO) for Cursor IDE using industry standards like SAML 2.0 and OpenID Connect (OIDC). This guide supports major Identity Providers, including Okta, Microsoft Entra ID, and Google Workspace. It covers configuration steps, attribute mapping, SCIM provisioning, and best practices for enterprise-level authentication and user lifecycle management.

Configure robust role-based access control (RBAC) for Granola workspaces, essential for enterprise-level data security and governance. This guide details setting up role hierarchies (Owner, Admin, Member, Viewer), defining granular permissions, integrating SSO/SCIM for automated provisioning, and implementing least-privilege access principles. It also covers advanced features like per-workspace sharing policies and detailed audit logging to ensure regulatory compliance.

AWS Cost Operations describes a capability for overseeing cloud spending, tracking expense drivers, and aligning workloads with budgets so teams can optimize provisioning and finance decisions.

This skill provides a comprehensive guide for deploying Navan's connections to major enterprise platforms, including ERP systems (NetSuite, Xero), HRIS (Workday), and Identity Providers (Okta, Azure AD). It covers best practices for expense sync, user provisioning (SCIM), and Single Sign-On (SAML/OIDC) using APIs and admin configurations, ensuring secure and accurate data flow across disparate business systems.

This skill provides comprehensive management for Navan organizational entities, including users, departments, cost centers, and approval chains. It supports user lifecycle management via SCIM 2.0 provisioning (integrating with Okta, Entra ID) and enables detailed auditing of user access and structural compliance. Essential for large organizations managing complex travel policies and identities.

This comprehensive playbook provides an end-to-end guide for migrating from legacy Travel Management Systems (like SAP Concur or other TMCs) to Navan. It covers critical phases including data inventory, user provisioning (via SCIM/API), manual policy recreation, parallel system running, and the final cutover checklist. Use this guide for planning and executing complex travel system migrations.

Builds comprehensive identity governance and lifecycle management processes. Automates the entire employee journey (Joiner, Mover, Leaver) from the authoritative HR source of truth. This process handles role-based access provisioning, access request workflows, periodic recertification, and remediation of orphaned accounts, ensuring continuous compliance with standards like SOX and GDPR.

Generates a comprehensive, structured onboarding package for new marketing clients and service engagements. This workflow covers everything from the initial kickoff meeting agenda and deep discovery questionnaire to defining stakeholder roles (RACI), setting 30-60-90 day milestones, managing access provisioning, and establishing clear communication and escalation protocols for a smooth project start.