netlify-access-control

Route Netlify site authentication requests to Identity, Password Protection, Auth0, or SAML SSO.

32|7|Updated Nov 26, 2025
One-click install
npx skills add https://github.com/netlify/context-and-tools --skill netlify-access-control
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: netlify-access-control
Source: https://github.com/netlify/context-and-tools/tree/main/codex/skills/netlify-access-control
Command: npx skills add https://github.com/netlify/context-and-tools --skill netlify-access-control

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps manage access control for Netlify sites, distinguishing between Netlify Identity and Secure Access, and routing requests to the appropriate layer for authentication.

Core Features & Use Cases

  • Access Control: Manage who can reach a Netlify site and differentiate between Netlify Identity and Secure Access.
  • Authentication Routing: Directs requests to app-level Identity, site-visitor Password Protection, the Auth0 extension, or Team/Org SAML SSO.
  • Two-Layer Pattern: Explains the two-layer (perimeter + in-app identity) pattern and its double-login tradeoff.
  • Use Case: When a user wants to lock a site, restrict access to employees only, set up password protection, SSO, or SAML, or is confused about Netlify Identity vs Secure Access vs team login vs OAuth providers.

Quick Start

Use the netlify-access-control skill to configure access control for your Netlify site.

Frequently Asked Questions about netlify-access-control

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is the difference between Netlify Identity and Secure Access?

Netlify Identity handles app-level user authentication, while Secure Access controls perimeter-level site-visitor entry. This Skill distinguishes between them and routes requests to Password Protection, SAML SSO, or the Auth0 extension.

How do I lock a Netlify site to restrict access to employees only?

You can lock a Netlify site by configuring access control in the Netlify dashboard. This Skill routes restrictions to Secure Access using Password Protection or Team/Org SAML SSO for employee authentication.

Can I use the Auth0 extension with Netlify access control?

Yes, the Auth0 extension is supported as an authentication routing option. This Skill directs requests to the Auth0 extension alongside app-level Identity, site-visitor Password Protection, or Team/Org SAML SSO.

Why does my Netlify site require double login authentication?

Double login occurs due to the two-layer pattern combining perimeter Secure Access and in-app Netlify Identity. This Skill explains this pattern and its tradeoffs to help you manage authentication routing.

How do I set up SAML SSO for my Netlify site?

Setting up SAML SSO for a Netlify site requires configuring Team/Org SSO in the Netlify dashboard. This Skill routes access control requests to the appropriate SAML SSO layer for Team or Organization authentication.