authentication
Installation
SKILL.md
Authentication for External Data Sources
Security Requirement
External data sources MUST require that the principal (user or service) connecting to them is identified and authenticated. The authentication MUST use standard protocols.
Standard Authentication Protocols
| Protocol | Use Case |
|---|---|
| OAuth 2.1 / OIDC | Web APIs, REST services, cloud data sources |
| SPIFFE/SPIRE + mTLS | Service-to-service connections within infrastructure |
| SAML | Federated enterprise data sources |
| Kerberos | On-premise databases and services (Active Directory environments) |
| Client certificates (mTLS) | Machine-to-machine data source access |