Configure SAML2, OAuth2, or OIDC Single Sign-On for ColdBox and BoxLang applications.
npx skills add https://github.com/ColdBox/skills --skill cbsso
Please help me install this Agent Skill. Skill: cbsso Source: https://github.com/ColdBox/skills/tree/main/modules/cbsso Command: npx skills add https://github.com/ColdBox/skills --skill cbsso
Simplifies integrating Single Sign-On into ColdBox/BoxLang applications by providing patterns and guidance for SAML2 and OAuth2/OIDC flows, callback handling, token validation, and user provisioning so teams can avoid common security pitfalls and implementation errors.
Use the cbsso skill to generate a ColdBox module configuration and a callback handler that implements OAuth2/OIDC authorization, validates state, exchanges tokens, and provisions users on first login.
High-intent search queries and answers about installing and using this skill.
Implement SSO in a ColdBox application by configuring provider settings for SAML2, OAuth2, or OIDC, then generating an authorization URL and callback handler to process token exchanges and extract claims.
Handle just-in-time user provisioning during OIDC login by extracting claims from the validated token, creating the user record on first login, and integrating the session with cbauth or cbsecurity.
Configure SAML2 single logout in ColdBox by setting up provider logout endpoints and handling session termination flows to ensure users are properly logged out of the identity provider.
Yes, OAuth2 flows support optional PKCE to enhance security. You can enable PKCE during provider configuration to protect authorization code exchanges from interception.
OAuth2 callback processing requires securely stored client secrets, HTTPS redirect URIs, and state validation to prevent CSRF attacks during token exchange.
State validation works by comparing the state parameter returned from the identity provider callback against the value generated during the initial authorization URL creation to prevent CSRF attacks.
ColdBoxConfigure OAuth2/OpenID Connect SSO for ColdBox applications using the cbsso module.
ColdBoxImplement role-based access control for ColdBox applications with database schemas.
FortiumPartnersExecute authentication and authorization smoke tests for login, token validation, and access control.
jinyimeng01Analyze OAuth 2.0 and SSO authentication implementations for security weaknesses during penetration tests.
