Design, secure, and operate authentik-based OIDC integrations for production systems.
npx skills add https://github.com/kittne/codex-skills-by-codex --skill authentik-kittne
Please help me install this Agent Skill. Skill: authentik Source: https://github.com/kittne/codex-skills-by-codex/tree/main/authentik Command: npx skills add https://github.com/kittne/codex-skills-by-codex --skill authentik-kittne
Design, secure, and operate authentik-based OIDC integrations for production systems. Use for application/provider setup, scopes and claims mapping, redirect URI policy, token/session lifetime decisions, signing key management, and incident-ready operations.
Deploy an authentik provider, configure a client with strict redirect URIs, map essential claims, and enable rotation and monitoring.
High-intent search queries and answers about installing and using this skill.
To configure authentik OIDC for production, create dedicated provider/app pairs, set strict redirect URI policies, and choose a client_type matching your threat model. This ensures secure access control and prevents redirect URI regex pitfalls across environments.
Mapping OIDC scopes and claims in authentik requires defining minimal default scopes, reviewing subject strategies for downstream linking, and validating claim exposure. This prevents claim overexposure and ensures consistent subject mappings across authenticated applications.
Authentik OIDC token failures often stem from token misconfigurations, inconsistent subject mappings, or redirect URI regex pitfalls. Validate JWKS availability, check openid configuration endpoints, and ensure environment-wide consistency to resolve these issues.
Rotating authentik signing keys and managing token lifetimes involves tuning token lifetimes, validating logout endpoints, and executing key rotation procedures. This maintains operational readiness and secures session management against unauthorized access.
Authentik OIDC integration supports incident recovery by monitoring audit trails, rehearsing recovery procedures, and documenting incident runbooks. You get operational guardrails, endpoint monitoring, and repeatable recovery paths for production systems.
Sir-chawakornConfigure DNS records and automate ACME certificate renewal with TLS policy enforcement.
ryan-nguyen-01Implement OAuth2 and OpenID Connect authorization code flows with PKCE and JWKS token validation.
SSujitXManage Docker container networking, Nginx reverse proxy configurations, and Let's Encrypt SSL certificates.
Lobbi-DocsConfigure Keycloak realms, clients, and authentication flows.
