Skill UI

A guide for building secure, scalable, and robust authentication and authorization systems. This skill covers industry-standard practices, including OAuth2, JWT, OIDC, RBAC, and session management, helping developers design secure APIs and identity infrastructure.

A guide for building secure, scalable, and robust authentication and authorization systems. This skill covers industry-standard practices, including OAuth2, JWT, OIDC, RBAC, and session management, helping developers design secure APIs and identity infrastructure.

This comprehensive guide demonstrates how to implement enterprise-grade Role-Based Access Control (RBAC) and organization management using Clerk. It covers setting up multi-tenant architectures, defining granular custom roles and permissions (e.g., data:write, org:admin), integrating SSO (SAML/OIDC), and securely protecting both Next.js routes (via middleware) and client components based on user roles and specific permissions. Ideal for building secure, scalable SaaS applications.

A comprehensive guide for setting up Single Sign-On (SSO) for Cursor IDE using industry standards like SAML 2.0 and OpenID Connect (OIDC). This guide supports major Identity Providers, including Okta, Microsoft Entra ID, and Google Workspace. It covers configuration steps, attribute mapping, SCIM provisioning, and best practices for enterprise-level authentication and user lifecycle management.

This guide details how to implement robust Role-Based Access Control (RBAC) and manage teams within Documenso Enterprise. It covers defining granular roles (Owner, Admin, Member), integrating Single Sign-On (SSO) using OIDC, setting up audit logging, and handling multi-tenant architectures using dedicated API keys. Essential for building large-scale, secure, enterprise-grade document management systems.

Validates Vertex AI Agent Engine GitHub Actions workflows, enforcing Workload Identity Federation, least-privilege IAM, OIDC permissions, and security scanning so GCP deployments stay automated and secure.

This guide details setting up enterprise-grade access control for Langfuse. Learn how to configure role-based permissions (Owner, Admin, Member), implement scoped API keys, integrate SSO (SAML/OIDC), and set up comprehensive audit logging. It is essential for managing multi-team isolation and ensuring compliance in production environments.

This skill facilitates the configuration and management of Single Sign-On (SSO) for Windsurf enterprise deployments. It supports industry-standard protocols like SAML 2.0 and OIDC/OAuth 2.0, allowing seamless identity integration with major providers such as Okta, Azure AD, and Google Workspace. Essential for administrators implementing centralized, secure enterprise authentication.

A comprehensive guide for penetration testers detailing methods to identify and exploit misconfigurations in OAuth 2.0 and OpenID Connect (OIDC) flows. Techniques cover redirect URI manipulation, authorization code theft, token leakage via headers, and scope escalation during security assessments.

Cosign is a powerful Sigstore tool designed to secure container images and OCI artifacts. It allows users to sign and verify image provenance using both traditional key-based methods and modern, keyless OIDC workflows. This skill covers generating signatures, attaching critical metadata like SBOM and SLSA attestations, and implementing admission controls for robust supply chain security.

Implement Kubernetes RBAC to enforce least-privilege access across namespaces, covering Role/ClusterRole design, binding configuration, service account hardening, OIDC integration, and audit logging for multi-tenant clusters.

This guide outlines best practices for hardening Kubernetes Role-Based Access Control (RBAC). It focuses on implementing least-privilege principles by auditing and removing excessive cluster-admin bindings, scoping roles to namespaces, separating service accounts, and integrating external OIDC providers. Use this when improving cluster security posture, meeting compliance standards, or mitigating privilege escalation risks.