Configure OAuth2/OpenID Connect SSO for ColdBox applications using the cbsso module.
npx skills add https://github.com/ColdBox/skills --skill coldbox-security-sso
Please help me install this Agent Skill. Skill: coldbox-security-sso Source: https://github.com/ColdBox/skills/tree/main/security/sso-integration Command: npx skills add https://github.com/ColdBox/skills --skill coldbox-security-sso
SSO integration for ColdBox apps using the cbsso module and OAuth2/OpenID Connect, enabling users to authenticate with external providers while maintaining local user mappings.
Configure your cbsso providers in config/ColdBox.cfc and define routes for /sso/login, /sso/callback, and /sso/logout, then trigger /sso/login/google to start a sign-in.
High-intent search queries and answers about installing and using this skill.
You can enable single sign-on in a ColdBox app by wiring the cbsso module to external identity providers using OAuth2. Configure provider client IDs, secrets, and redirect URIs in module settings to handle login redirects and callback exchanges.
Yes, ColdBox SSO supports Azure AD and Okta authentication alongside Google and GitHub. It uses OpenID Connect and OAuth2 protocols to integrate with these external providers, managing user provisioning and local identity mapping during the callback exchange.
When new users authenticate via OpenID Connect, ColdBox SSO handles user provisioning by mapping external identities to local users. It syncs metadata and establishes sessions automatically after the provider callback exchange completes successfully.
You need to define routes for /sso/login, /sso/callback, and /sso/logout in your ColdBox configuration. Triggering /sso/login/google starts the sign-in flow, directing users to the provider and returning through the callback route.
Yes, ColdBox SSO includes UI integration features for adding social login buttons and a provider switcher to your login page. This allows users to select from configured providers like Google or GitHub for authentication.
ColdBox SSO requires CSRF protection, token validation, and HTTPS redirects as security best practices. These measures secure the OAuth2 login flow, callback exchanges, and session management across multiple routes.
ColdBoxConfigure SAML2, OAuth2, or OIDC Single Sign-On for ColdBox and BoxLang applications.
hangeaiagentAutomate silent SSO login for AgentPit sub-apps via backend endpoints and URL hash token transmission.
JustineDevsOutline pragmatic security hardening practices for web apps and APIs.
mrigsbyCreate reusable ColdBox modules with standardized structure and configuration.
