Skill UI

A guide for building secure, scalable, and robust authentication and authorization systems. This skill covers industry-standard practices, including OAuth2, JWT, OIDC, RBAC, and session management, helping developers design secure APIs and identity infrastructure.

A guide for building secure, scalable, and robust authentication and authorization systems. This skill covers industry-standard practices, including OAuth2, JWT, OIDC, RBAC, and session management, helping developers design secure APIs and identity infrastructure.

This skill automates the validation of AWS environments against critical industry compliance benchmarks. It performs detailed checks for CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 standards, covering key areas like Identity and Access Management (IAM), logging, data protection, and network security. Essential for preparing for regulatory audits and maintaining continuous secure operations.

This comprehensive guide provides scripts and best practices for auditing, hardening, and enforcing AWS Identity and Access Management (IAM) policies. It covers implementing least privilege, defense in depth, and auditing for overly permissive actions, unused roles, and outdated access keys, significantly enhancing cloud security posture.

The official Azure Identity SDK for .NET, providing robust and flexible authentication for Azure SDK clients using Microsoft Entra ID. It simplifies secure credential management by supporting various methods, including Managed Identity, Service Principals, and the recommended DefaultAzureCredential, which automatically handles authentication across different environments (local, staging, production).

The official Azure Identity SDK for .NET, providing robust and flexible authentication for Azure SDK clients using Microsoft Entra ID. It simplifies secure credential management by supporting various methods, including Managed Identity, Service Principals, and the recommended DefaultAzureCredential, which automatically handles authentication across different environments (local, staging, production).

A comprehensive guide for setting up Single Sign-On (SSO) for Cursor IDE using industry standards like SAML 2.0 and OpenID Connect (OIDC). This guide supports major Identity Providers, including Okta, Microsoft Entra ID, and Google Workspace. It covers configuration steps, attribute mapping, SCIM provisioning, and best practices for enterprise-level authentication and user lifecycle management.

This guide provides comprehensive instructions for setting up and managing Sentry's enterprise-grade Role-Based Access Control (RBAC). It covers establishing the Organization-Team-Project hierarchy, integrating Single Sign-On (SSO) via SAML2, and automating user provisioning with SCIM. Use this when setting up large-scale organizations, enforcing granular team permissions, centralizing identity management, or ensuring regulatory compliance and audit logging.

This skill facilitates the configuration and management of Single Sign-On (SSO) for Windsurf enterprise deployments. It supports industry-standard protocols like SAML 2.0 and OIDC/OAuth 2.0, allowing seamless identity integration with major providers such as Okta, Azure AD, and Google Workspace. Essential for administrators implementing centralized, secure enterprise authentication.

A comprehensive expert for deploying and scaling AI agents using AWS Bedrock AgentCore. This guide covers the full lifecycle of agent management, including service selection (Gateway, Runtime, Memory, Identity, etc.), deployment patterns, credential management, and advanced integration workflows required for enterprise-scale AI solutions.

This skill guides the implementation of comprehensive Identity Governance and Lifecycle Management (IGM) processes. It automates the entire employee identity lifecycle—from pre-hire onboarding (Joiner) to role changes (Mover) and termination (Leaver). Key components include Role-Based Access Control (RBAC) provisioning, periodic access recertification, and remediation of orphaned accounts, ensuring compliance with standards like SOX and GDPR.

This guide outlines how to implement Google Cloud Identity-Aware Proxy (IAP) to enforce zero-trust, identity-based access control across various Google Cloud services (App Engine, Cloud Run, GKE, Compute Engine). It details configuring per-request authentication, context-aware policies (like device posture and location), and programmatic access management for highly secure internal applications.