Skill UI

This skill guides the architecture and implementation of SAML 2.0 identity federation between on-premises Active Directory and Microsoft Entra ID (Azure AD). It covers establishing seamless Single Sign-On (SSO) capabilities, eliminating the need for separate credentials and ensuring secure, cross-domain authentication for cloud applications.

This guide provides a comprehensive approach to securing AWS Identity and Access Management (IAM) configurations. It walks practitioners through inventorying existing permissions, using Access Analyzer to identify overly permissive policies, implementing specific resource scoping, and attaching permission boundaries. Key strategies include enforcing least privilege access, managing credential rotation, and meeting stringent compliance requirements like SOC 2 and PCI-DSS.

Learn how to configure and execute access recertification campaigns within Saviynt Enterprise Identity Cloud. This comprehensive process validates user entitlements, ensures strict compliance with standards like SOX, SOC2, and HIPAA, and automates the timely revocation of excessive or unused access rights.

A comprehensive guide covering the end-to-end configuration of SAML 2.0 Single Sign-On (SSO) using Okta as the Identity Provider (IdP). This skill details configuring authentication flows (SP/IdP initiated), attribute mapping, secure certificate management, and implementing advanced security hardening like SHA-256 signatures and AES-256 encryption for robust, enterprise-grade access control.

This skill guides the comprehensive hardening of LDAP directory services. It addresses common vulnerabilities such as LDAP injection, anonymous binding, and credential harvesting. Users can enforce strong security controls, including LDAPS, channel binding, and granular access control lists (ACLs). It is essential when establishing robust identity access management (IAM) architecture or meeting stringent compliance requirements like NIST standards.

This tool automates the OAuth 2.0 scope minimization review process. It identifies over-permissioned third-party application integrations, excessive API scopes, and risky OAuth consent patterns across identity providers. It is crucial for security audits, compliance (GDPR, SOC 2), and enforcing the least-privilege principle for cross-boundary data access.

This skill details the implementation of continuous identity verification for Zero Trust architectures. It covers deploying phishing-resistant Multi-Factor Authentication (FIDO2/WebAuthn), establishing risk-based conditional access policies, and integrating identity governance controls aligned with NIST and CISA frameworks. Learn how to move beyond traditional passwords to dynamic, adaptive security models.

Provides a comprehensive guide to implementing Zero Trust Network Architecture on Google Cloud Platform (GCP) using Identity-Aware Proxy (IAP). It enforces rigorous, per-request identity verification and context-aware authorization for services like Compute Engine, App Engine, and Cloud Run. This ensures that only authenticated users who meet specific criteria (e.g., device posture, corporate location, time window) can access protected resources, eliminating reliance on public IPs or VPNs.

This toolkit provides comprehensive offensive and administrative capabilities for Microsoft Entra ID, Azure AD, and AD FS. It allows authorized penetration testers to perform unauthenticated reconnaissance, acquire various access tokens, and critically, test for federation backdoors (Golden SAML). It is essential for validating identity-attack resilience and producing detailed hardening recommendations during red-team engagements.