Analyze and optimize SAML 2.0 SSO configuration and security.
npx skills add https://github.com/hung-phan/system-skills --skill saml-hung-phan
Please help me install this Agent Skill. Skill: saml Source: https://github.com/hung-phan/system-skills/tree/main/skills/system-review/references/security/saml Command: npx skills add https://github.com/hung-phan/system-skills --skill saml-hung-phan
This Skill solves the complex challenges of SAML 2.0 setup and security in enterprise environments, including secure assertion, encryption, and error handling in identity providers and service providers.
Run a security audit of your SAML setup by typing /system-review security/saml review.
High-intent search queries and answers about installing and using this skill.
To secure SAML 2.0 SSO against XML signature wrapping attacks, you must verify both the assertion and response signatures while enforcing strict audience binding and replay protection to ensure message integrity.
The best way to configure enterprise SSO integration with Azure AD and Okta is to follow strict configuration guidelines for XML signed message exchange, ensuring secure assertion handling and compliance with identity federation standards.
Yes, SAML 2.0 single sign-on supports replay attack prevention for large organizations by implementing secure assertion verification and token validation mechanisms tailored for enterprise-scale identity federation.
You can audit your SAML setup for security vulnerabilities by running a comprehensive system review that analyzes assertion encryption, response verification, and identity provider configurations to identify potential weaknesses.
SAML integration fails when connecting AD FS to a service provider usually due to mismatched audience binding, incorrect XML signature verification, or improper handling of encrypted assertions during the message exchange process.
Yes, you can use SAML 2.0 for identity federation across multiple identity providers like PingFederate and Entra, provided you enforce consistent security standards for assertion verification and audience restriction.
DuendeSoftwareConfigure Duende IdentityServer as a SAML 2.0 Identity Provider with SP integration.
skwuwuVerify GVM audit log integrity and export compliance reports.
jinyimeng01Analyze OAuth 2.0 and SSO authentication implementations for security weaknesses during penetration tests.
EntroVyxDetect XML Signature Wrapping, signature stripping, and user enumeration in SAML SSO implementations.
