hai-iam

Centralize authentication and authorization with unified IAM supporting password, OTP, LDAP, and API keys.

3|7|Updated Jan 28, 2026
One-click install
npx skills add https://github.com/hai-series/hai-framework --skill hai-iam
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: hai-iam
Source: https://github.com/hai-series/hai-framework/tree/main/packages/cli/templates/skills/hai-iam
Command: npx skills add https://github.com/hai-series/hai-framework --skill hai-iam

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Centralize identity and access management across applications, eliminating scattered authentication logic and inconsistent access checks.

Core Features & Use Cases

  • Authentication methods: supports password, OTP, LDAP, and API key logins

  • Bearer token management: issuance, rotation, and revocation for secure sessions

  • RBAC and permissions: roles, permissions, wildcard access with admin override

  • Audit and compliance: logs security-relevant events and enforces policy

  • Use Case: Integrate with your app to protect APIs, manage user roles, and enable token-based sessions.

Quick Start

Configure and initialize iam in your app, then use its auth and session APIs to authenticate users and manage token-based sessions.

Frequently Asked Questions about hai-iam

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I centralize authentication and RBAC across multiple services?

Centralize authentication and RBAC using a unified IAM module that supports multiple login strategies, Bearer token management, and robust role-based permissions across users to eliminate scattered logic.

What is the best way to manage Bearer token issuance and rotation for API sessions?

Manage Bearer token issuance and rotation through standardized interfaces that enforce deterministic API patterns, enabling secure token-based sessions with safe revocation and error handling.

Can I use LDAP and API key authentication strategies within the same IAM module?

You can configure LDAP and API key authentication alongside password and OTP login strategies within the same unified IAM module to enforce access policies across your services.

How does wildcard access with admin override work for role-based permissions?

Wildcard access with admin override allows specific roles to bypass granular permission checks, granting broad access while standard users remain restricted by defined RBAC rules.

Does the IAM module support security auditing and event logging for compliance?

The IAM module supports security auditing by logging security-relevant events and enforcing policy, ensuring compliance through standardized configuration hooks and audit trails.

When do I need to implement token rotation and revocation in my application?

Implement token rotation and revocation when managing secure sessions to prevent unauthorized access, utilizing deterministic API patterns to safely handle token expiration and invalidation.