Skill UI

This skill provides a comprehensive guide for deploying Navan's connections to major enterprise platforms, including ERP systems (NetSuite, Xero), HRIS (Workday), and Identity Providers (Okta, Azure AD). It covers best practices for expense sync, user provisioning (SCIM), and Single Sign-On (SAML/OIDC) using APIs and admin configurations, ensuring secure and accurate data flow across disparate business systems.

This guide details how to integrate Auth0 as an external Identity Provider (IDP) for Webiny, replacing the default Cognito authentication. It involves creating an API config class to map Auth0's JWT claims to Webiny identities and implementing a React extension component. Users must set environment variables (AUTH0_ISSUER, AUTH0_CLIENT_ID) and register the necessary extensions for successful OIDC authentication flow.

This skill guides developers on integrating Okta as an external Identity Provider (IDP) for Webiny. It replaces default authentication methods (like Cognito) by utilizing the OpenID Connect (OIDC) standard. The process involves setting up an API configuration class to map Okta's JWT claims to Webiny identities, and creating a React extension component to wire the issuer URL, client ID, and configuration path, enabling seamless Single Sign-On (SSO) using Okta.

A comprehensive playbook for testing security flaws in OAuth 2.0 and OpenID Connect (OIDC) implementations. Use this guide to systematically check for misconfigurations in redirect URI handling, state and nonce validation, PKCE enforcement, token audience/issuer checks, and account binding vulnerabilities. Essential for reviewing applications linked to external identity providers.

A comprehensive guide to configuring and hardening SAML 2.0 Single Sign-On (SSO) using Okta as the Identity Provider (IdP). This skill covers end-to-end flow implementation, attribute mapping, advanced security controls like SHA-256 signatures and AES-256 encryption, and testing procedures for robust, enterprise-grade identity access management systems.

This tool automates the OAuth 2.0 scope minimization review process. It identifies over-permissioned third-party application integrations, excessive API scopes, and risky OAuth consent patterns across identity providers. It is crucial for security audits, compliance (GDPR, SOC 2), and enforcing the least-privilege principle for cross-boundary data access.

This skill maps an organization's entire identity fabric, identifying its tenant boundaries (federation mapping) and various Identity Providers (IdPs like Entra, Okta, ADFS, Google). It performs pre-authentication user enumeration and synthesizes login candidates using harvested names and confirmed email patterns. It is strictly for reconnaissance and mapping, never for credential submission or authentication bypass.

Configure authentication and role-based authorization for Power Pages code sites. Supports multiple identity providers including Microsoft Entra ID, OpenID Connect, SAML, and social logins. Creates auth services, authorization utilities, and UI components with framework-appropriate patterns. Includes development parity with mock data for local testing.

Implements federated sign-in using Amazon Cognito as the central user pool. This skill allows developers to integrate various external Identity Providers (IdPs) such as Google, Facebook, Apple, and Microsoft (OIDC/Entra ID) for Single Sign-On (SSO). It automates the setup of Cognito User Pool Domains, OAuth configurations, and handles the complex identity synchronization process, ensuring seamless user experience while maintaining centralized user management.

This skill guides developers through configuring Microsoft Entra ID (Azure AD) as a federated identity provider for Webiny projects. It enables Single Sign-On (SSO) by allowing users to authenticate using their corporate Microsoft 365 accounts. The setup involves registering an application in the Entra ID portal and integrating the credentials into the Cognito Federation structure, allowing Cognito to remain the core user pool while utilizing Microsoft identities for login.

Conduct periodic access reviews and certifications for AWS IAM, GitHub, Okta, and other identity providers, with automated reporting, certification workflows, and unused permission detection.