Skill UI

This guide details the comprehensive deployment of Cisco Duo Multi-Factor Authentication across critical access points like VPN, RDP, SSH, and web applications. It covers setting up the Duo Authentication Proxy, implementing adaptive access policies based on risk and device health, and deploying phishing-resistant methods like WebAuthn/FIDO2, ensuring compliance with NIST standards. Use this when hardening identity access management or establishing robust security controls.

This skill guides the implementation of continuous, risk-adaptive identity verification crucial for Zero Trust Architecture (ZTA). It covers deploying phishing-resistant MFA (FIDO2/WebAuthn), advanced risk-based conditional access policies, and identity governance strategies. Users learn how to move beyond traditional credentials by leveraging multiple signals—such as device posture, behavioral biometrics, and location context—to dynamically assess and enforce trust levels before granting access.

This guide details the implementation of advanced, phishing-resistant, passwordless authentication using Microsoft Entra ID. It covers configuring FIDO2 security keys, Windows Hello for Business, and passkey support via Microsoft Authenticator. Use this skill to eliminate reliance on passwords, mitigate credential stuffing attacks, and satisfy strict regulatory mandates for modern identity access management.

Implement robust, phishing-resistant authentication using FIDO2/WebAuthn standards. This guide covers integrating WebAuthn APIs, configuring FIDO2 servers, managing passkey enrollment, and migrating systems away from traditional passwords. Essential for meeting high-assurance security standards like NIST SP 800-63B AAL3.

A comprehensive guide to detecting and mitigating advanced Adversary-in-the-Middle (AiTM) phishing attacks, which bypass Multi-Factor Authentication (MFA) using reverse proxies (e.g., Evilginx, EvilProxy). Learn defensive strategies including implementing FIDO2, configuring Conditional Access policies, and monitoring session hijacking indicators in SIEM/Web Proxies.

A comprehensive guide for building a FIDO2/WebAuthn relying party server using python-fido2. This skill covers the entire lifecycle of passwordless authentication, including secure credential registration (enrollment of hardware keys like YubiKey and resident passkeys) and robust authentication ceremonies. It is essential for migrating traditional password-based systems to phishing-resistant Multi-Factor Authentication (MFA).

This skill covers implementing continuous, risk-adaptive identity verification within a Zero Trust framework. It utilizes phishing-resistant MFA (FIDO2/WebAuthn) and risk-based conditional access policies, ensuring robust and dynamic security controls. Use when designing advanced identity architectures or improving compliance security.