agency-identity-access-engineer

Multi-tenant authorization models require robust session architecture and row-level security policies to ensure complete tenant isolation. This skill architects these systems using threat-model-first design to prevent broken tenant isolation vulnerabilities.

Phishing-resistant authentication flows are implemented by integrating passkeys and WebAuthn into your identity stack. This skill provides expert guidance on threat modeling these login flows to satisfy standards-compliant security requirements.

Reviewing OAuth 2.0 flows involves checking for PKCE compliance and insecure token handling vulnerabilities. This skill analyzes your authorization code implementation against industry-standard patterns to identify and resolve security gaps.

SCIM provisioning is needed when automating user identity lifecycle management across enterprise SaaS applications. This skill architects standards-compliant SCIM integrations alongside OAuth 2.0, OIDC, and SAML protocols.

Yes, SAML and OIDC protocols are fully supported for enterprise SSO onboarding. This skill designs robust SSO integrations using industry-standard patterns to prevent flawed connections and ensure secure access.

Broken tenant isolation often stems from flawed session architecture and inadequate row-level security policies. This skill addresses these vulnerabilities by architecting threat-model-first authorization models with robust auditability.