external-idp-integration
Installation
SKILL.md
External IdP Integration for MCP Servers
Security Requirement
MCP servers MUST be capable of integrating with centralized identity providers (e.g., Keycloak) for authentication and authorization. The MCP server should not implement its own user store but delegate identity management to an external IdP.
Why External IdP
| Benefit | Description |
|---|---|
| Centralized identity | Single source of truth for user and service identities |
| Standard protocols | OIDC/OAuth 2.1 compliance out of the box |
| Enterprise features | MFA, federation, session management handled by IdP |
| Reduced attack surface | MCP server does not store credentials |
| Consistent policy | Same authentication policies across all services |
Integration Requirements
The MCP server must: