identity-auth-repair

When SSO fails across multiple apps simultaneously, the root cause is often NTP drift, expired Kerberos tickets, or expiring client certificates. This skill orchestrates checks across these identity dependencies and applies conditional remediation to restore access to all affected downstream apps.

To fix Kerberos login errors affecting file shares and web apps, this skill inspects ticket health and verifies AD domain binding. It renews expired tickets when possible and escalates to IT if the failure stems from local identity disconnection rather than simple ticket expiry.

Yes, NTP time drift causes MFA and VPN authentication failures because time-sensitive protocols reject requests with skewed system clocks. This skill checks NTP synchronization status and resyncs system time when drift is detected, immediately restoring MFA and VPN authentication.

To troubleshoot client certificate authentication problems, this skill enumerates installed client certificates and checks their expiry dates. It identifies certificates requiring re-issuance and distinguishes local identity issues from far-side endpoint TLS certificate problems.

Yes, this approach works for authentication failures occurring after sleep, travel, or time-zone changes. These events often trigger NTP drift or stale Kerberos tickets, which this skill diagnoses and repairs by resyncing system time and renewing tickets to recover all affected downstream apps.

You should escalate SSO and authentication repair issues to IT when this skill identifies far-side endpoint TLS certificate problems or confirms a broken AD domain binding. These conditions require manual IT intervention for certificate re-issuance or domain re-binding.