skills.rest
tonyandrewmeyer
tonyandrewmeyerCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

identity-platform

Integrate Juju charms with the Canonical Identity Platform for authentication.

1|Updated Feb 8, 2026
Search Tags:#oauth#sso#oidc#juju#identity-platform#charm-wiring
One-click install
npx skills add https://github.com/tonyandrewmeyer/cantrip --skill identity-platform
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: identity-platform
Source: https://github.com/tonyandrewmeyer/cantrip/tree/main/src/cantrip/skills/identity-platform
Command: npx skills add https://github.com/tonyandrewmeyer/cantrip --skill identity-platform

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Wire charms to the Canonical Identity Platform to provide login, OIDC tokens, OAuth clients, and federated identity across Juju charms.

Core Features & Use Cases

  • Supports five interfaces: oauth, oauth-cli, oidc-info, hydra-token-introspect, kratos-external-idp to connect with Hydra/Kratos-based identity.
  • Bundle-based topology with default login workflow and documented escape hatches for SaaS Hydra or internal mTLS setups.
  • Observability and security guidance for secret handling and library fetch via charmcraft.

Quick Start

Deploy canonical-identity-platform and relate it to your charm using the oauth interface.

Frequently Asked Questions about identity-platform

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I connect a Juju charm to an Identity Platform for OIDC login?▼

To connect a Juju charm to the Identity Platform for OIDC login, deploy the canonical-identity-platform and relate it to your charm using the oauth interface to wire authentication.

What identity interfaces are supported for charm wiring?▼

Charm wiring supports five identity interfaces: oauth, oauth-cli, oidc-info, hydra-token-introspect, and kratos-external-idp for connecting with Hydra and Kratos-based identity providers.

Can I use a custom Hydra SaaS setup instead of the default bundle topology?▼

Yes, you can use a custom Hydra SaaS setup. The Identity Platform provides documented escape hatches for SaaS Hydra or internal mTLS configurations outside the default bundle topology.

How does federated authentication work with Canonical Identity Platform charms?▼

Federated authentication works by wiring charms to the Canonical Identity Platform using the kratos-external-idp interface, enabling external identity provider integration and federated login across Juju deployments.

Do I need charmcraft to fetch libraries and handle secrets for OAuth integration?▼

Yes, you need charmcraft to fetch libraries and securely handle secrets. The Identity Platform provides observability and security guidance for secret handling and library fetch within Charmcraft workflows.

What is the best way to handle service-to-service authentication in Juju charms?▼

The best way to handle service-to-service authentication in Juju charms is wiring them to the Canonical Identity Platform to obtain OIDC tokens and OAuth clients via the supported interfaces.

Related Skills

Explore More Software Engineering Skills→
tonyandrewmeyertonyandrewmeyer
1

terraform

Generate Terraform modules for declarative Juju charm deployments.

Community
Intermediate
northseadlnorthseadl

cognito

Manage user authentication, authorization, and identity federation with AWS Cognito.

Community
Advanced
H2OSLabsH2OSLabs
1

oneauth-oauth2

Authenticate users via OneAuth OAuth2/OIDC with PKCE and token management.

Official
Advanced
BaraArdiwinataBaraArdiwinata

add-external-oauth

Implement OAuth2/OIDC identity provider integration in Next.js with PKCE and Supabase Admin API.

Community
Advanced