aegis-oauth-sso
Installation
SKILL.md
OAuth 2.0 / OIDC / SAML Federation Checks
Scope & Objectives
Run this module when the repo contains federation code or configuration. Triggers include any of:
- Client/RP libraries:
passport/passport-*,omniauth(-*)*,authlib,flask-dance,social-auth-core,django-allauth,python-jose,PyJWTused on id_tokens,spring-boot-starter-oauth2-client,spring-security-saml2-service-provider,Microsoft.AspNetCore.Authentication.OpenIdConnect/Cookies/JwtBearer,Microsoft.Identity.Web,next-auth,express-openid-connect,oauth4webapi,angular-oauth2-oidc,keycloak-js,@auth0/auth0-*/auth0-spa-js,@okta/*. - IdP-side artifacts: Keycloak realm-export JSON, Auth0 tenant/rules/actions config, Okta org YAML, ADFS/WIF settings,
doorkeeper,keycloakservices, custom/authorize,/token,/jwkshandlers. - SAML stacks:
passport-saml,samlify,saml2-js,ruby-saml,python3-saml, OneLogin SDKs, Shibboleth SP (shibboleth2.xml,attribute-map.xml), pac4j, Spring SAML.
Objectives, in audit order: