security-auth

Design authentication systems with OAuth 2, OpenID Connect, JWT, and SAML.

4|Updated Dec 4, 2025
One-click install
npx skills add https://github.com/ajianaz/skills-collection --skill security-auth
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-auth
Source: https://github.com/ajianaz/skills-collection/tree/main/skills/security-auth
Command: npx skills add https://github.com/ajianaz/skills-collection --skill security-auth

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides an end-to-end security and authentication workflow, orchestrating security architecture, identity management, access control, and compliance. It transforms security requirements into production-ready systems, ensuring comprehensive threat protection, regulatory adherence, and secure operations, reducing your risk exposure.

Core Features & Use Cases

  • Authentication System Design: Implement secure user authentication, including MFA and token-based systems.
  • Authorization Frameworks: Design and implement role-based (RBAC) or attribute-based (ABAC) access control.
  • Compliance & Auditing: Ensure regulatory compliance (e.g., SOC 2, GDPR) with comprehensive audit logging and reporting.
  • Use Case: "I need to implement a secure authentication system for my SaaS application, including multi-factor authentication and single sign-on. This skill will guide me through designing the architecture and implementing secure credential management."

Quick Start

Use the security-auth skill to implement a secure authentication system for a SaaS application with MFA and SSO support.

Frequently Asked Questions about security-auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement OAuth 2 and JWT authentication for my application?

OAuth 2 and JWT token-based authentication enable secure user login and API access. This skill guides you through designing token issuance, validation, and refresh workflows, integrating single sign-on, and securing credential storage across your application layers.

What's the difference between RBAC and ABAC for access control?

Role-based access control (RBAC) assigns permissions by user role, while attribute-based access control (ABAC) uses flexible rules combining user, resource, and environmental attributes. This skill helps you design and implement both frameworks based on your compliance and scalability requirements.

How do I implement multi-factor authentication and secure credential storage?

Multi-factor authentication adds a second verification layer beyond passwords; secure credential storage encrypts and isolates sensitive data. This skill provides architecture patterns for MFA integration, password hashing, token management, and protecting credentials across enterprise and cloud environments.

How can I ensure my authentication system meets SOC 2 and GDPR compliance?

SOC 2 and GDPR compliance require audit logging, data retention policies, and access controls. This skill delivers end-to-end compliance workflows including comprehensive audit trails, reporting mechanisms, and identity management practices to demonstrate regulatory adherence.

Can I use OpenID Connect and SAML with a single sign-on system?

OpenID Connect and SAML are identity protocols that enable single sign-on across applications. This skill shows how to architect multi-protocol authentication systems, integrate identity providers, and protect integration points in enterprise and SaaS environments.

What threats should my authentication architecture protect against?

Threat protection in authentication covers token hijacking, credential compromise, unauthorized API access, and privilege escalation. This skill incorporates multi-layer security architecture, threat detection, and API protection mechanisms to reduce risk exposure across your system.