Configure Safeguard A2A certificate-based workflows in safeguard-ps.
npx skills add https://github.com/OneIdentity/safeguard-ps --skill a2a-workflow
Please help me install this Agent Skill. Skill: a2a-workflow Source: https://github.com/OneIdentity/safeguard-ps/tree/main/.agents/skills/a2a-workflow Command: npx skills add https://github.com/OneIdentity/safeguard-ps --skill a2a-workflow
It helps you set up and operate Safeguard PowerShell A2A integrations so you can authenticate with mutual TLS and reliably retrieve or update managed credentials without relying on bearer-token sessions.
Run Wait-SafeguardA2aEvent with your appliance address, A2A API key, and client certificate thumbprint to start receiving credential update events in real time.
High-intent search queries and answers about installing and using this skill.
You can use a client certificate for A2A credential retrieval by configuring mutual TLS authentication in safeguard-ps, fetching the generated A2A API key, and calling A2A endpoints with the certificate and API key header to retrieve passwords or SSH private keys.
Certificate file, thumbprint, and in-memory certificate are three mutual TLS authentication modes for A2A. They dictate how the client certificate is supplied during API key header authentication, offering flexibility in securely passing certificates for credential retrieval without bearer tokens.
To listen for credential update events, run Wait-SafeguardA2aEvent with your appliance address, A2A API key, and client certificate thumbprint. This synchronizes long-running handlers via SignalR events to trigger handler-driven re-fetch behavior.
Yes, you can perform bidirectional secret updates through an A2A registration when the registration is configured appropriately. This allows retrieving and updating passwords or SSH private keys, including selecting specific key formats, via the A2A workflow.
Secret brokering in an A2A workflow works by creating access requests for other users through the A2A registration. This allows delegated credential retrieval and management without directly exposing the underlying managed passwords or SSH keys to the requesting user.
haxlysConfigure mutual TLS policies for Istio, Linkerd, SPIRE, and cert-manager deployments.
skkeoriwCreate webhook subscriptions that trigger tasks from external events.
OneIdentityProvision and clean up Safeguard test objects for integration testing.
api7Configure mutual TLS end-to-end for APISIX using the a6 CLI.
