skills.rest
hirokazu-kobayashi-koba-hiro
hirokazu-kobayashi-koba-hiroCOMMUNITY
Explore all skills by this author →
GitHub

ciba

Implement CIBA Poll, Push, and Ping flows with login hint resolution and FCM notifications.

7|1|Updated Feb 12, 2023
Search Tags:#authentication#multi-tenant#fcm#ciba#device-credential#backchannel#login-hint
One-click install
npx skills add https://github.com/hirokazu-kobayashi-koba-hiro/idp-server --skill ciba
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ciba
Source: https://github.com/hirokazu-kobayashi-koba-hiro/idp-server/tree/main/.claude/skills/ciba
Command: npx skills add https://github.com/hirokazu-kobayashi-koba-hiro/idp-server --skill ciba

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides a comprehensive guide and tooling to develop, modify, and troubleshoot the Client Initiated Backchannel Authentication (CIBA) flow, including poll, push, and ping modes, login hint resolution, and device notification integration.

Core Features & Use Cases

  • Support for Poll, Push, and Ping modes of CIBA to enable flexible user authentication flows.
  • Login Hint resolution using prefixes like sub:, email:, phone:, device: to identify users.
  • Device notification integration via FCM to trigger user authentication on mobile devices.
  • Device credential handling and management via tenant policies and context-aware configuration.
  • End-to-end testing guidance and example scenarios to validate CIBA behavior in multi-tenant IdP deployments.

Quick Start

Follow this guide to set up and implement CIBA support in your IdP server project.

Frequently Asked Questions about ciba

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement CIBA backchannel authentication in a multi-tenant IdP server?▼

CIBA backchannel authentication is implemented by developing Poll, Push, and Ping modes within your IdP server, using tenant policies and context-aware configuration to manage device credentials and grant lifecycles across tenants.

How does login hint resolution work for CIBA user identification?▼

Login hint resolution in CIBA identifies users by parsing prefixes like sub:, email:, phone:, and device: against tenant policies, enabling the IdP server to accurately target the correct user for backchannel authentication.

Can I use FCM push notifications to trigger CIBA user authentication on mobile devices?▼

Yes, you can integrate FCM-based device notifications to trigger CIBA user authentication, pushing authentication requests to mobile devices and managing the response within the Ping or Push mode flows.

What is the difference between Poll, Push, and Ping modes in CIBA flows?▼

Poll, Push, and Ping modes in CIBA define how the client retrieves authentication results: Poll uses repeated client requests, Push leverages FCM device notifications, and Ping requires a callback URI for server-side delivery.

How do I set up end-to-end testing coverage for CIBA authentication flows?▼

Setting up end-to-end testing for CIBA authentication flows involves configuring project references and test workflows that validate grant lifecycle management, login hint resolution, and device notification behaviors across multi-tenant deployments.

Related Skills

Explore More Software Engineering Skills→
hirokazu-kobayashi-koba-hirohirokazu-kobayashi-koba-hiro
7

fapi

Implements and validates Financial-grade API features including CIBA, PAR, JARM, mTLS across IdP-server integrations.

Community
Advanced
RsultCodingRsultCoding

validate-ui

Validate Archon Web UI end-to-end behavior across dashboard, chat, workflows, and SSE.

Community
Advanced
timequitytimequity
6

push-notifications

Configure Expo and Firebase push notifications for React Native apps.

Official
Intermediate
jpoutrinjpoutrin
14

oauth

Implement OAuth 2.0 and OpenID Connect authorization code flows with PKCE.

Community
Intermediate