endor-sso-integration-validation-troubleshooting

What problem does it solve?

This Skill helps teams plan, validate, and troubleshoot Endor Labs Enterprise SSO integrations when users can sign in but do not get the expected namespace access. It focuses on separating authentication success from authorization scope so you can identify why claims, groups, or namespace targeting are not producing the intended behavior.

Core Features & Use Cases

• Intake-first troubleshooting: Collects the IdP, namespace topology, access model, propagation intent, and real user examples before suggesting changes.
• Behavior-focused validation: Explains namespace-aware login, claim matching, root versus child namespace access, and propagation rules in platform terms.
• Evidence collection: Uses a Python helper to inspect authorization policies and recent authentication logs, then builds a claim-to-namespace access map.
• Use case: A customer can log in through SSO but cannot access a child namespace, or can see unexpected data from a root context, and needs a minimal policy adjustment recommendation.

Quick Start

Ask me to validate an Endor Labs SSO setup for a specific IdP, namespace, and test user, then produce the current access mapping, the gaps, and the smallest policy change needed.