Login to an SSO app (Microsoft-federated)

Ensure a browser tab is signed in to an app behind your organization's Microsoft (Entra) SSO. Use the chrome-cdp CLI on the user's real, already signed-in browser — this skill types no credentials.

See drive-chrome-cdp for CLI setup, output contract, and the passkey rule. Local skill, maintained in this repo (its sources.toml entry has no repo).

Supported apps & config

The caller passes one app; the current set (add more in the local config):

• workday — Workday (My Tasks, timesheet).
• engage — Engage (activity/points platform). A fresh tab on any of its /app/… URLs redirects to /account/login; after ENGAGE_SSO_BUTTON it returns to the URL you asked for, so no re-nav is needed — wait --url "<app host>/app" then wait --idle.
• outlook — Outlook web (mail/calendar, Microsoft 365); no SSO button (<APP>_SSO_BUTTON unset) — auto-authenticates via the shared Microsoft session, so just navigate and verify.