Guide SSO integration with OIDC, header injection, and basic authentication modes.
npx skills add https://github.com/gisikw/fort-nix --skill sso-guide
Please help me install this Agent Skill. Skill: sso-guide Source: https://github.com/gisikw/fort-nix/tree/main/.claude/skills/sso-guide Command: npx skills add https://github.com/gisikw/fort-nix --skill sso-guide
This Skill provides comprehensive guidance and configuration options for integrating Single Sign-On (SSO) with your services, simplifying authentication management and enhancing security.
none, oidc, headers, basicauth, gatekeeper) based on application capabilities.oauth2-proxy for header-based authentication, and ensure only authenticated users can access the service.Use the sso-guide skill to select an SSO mode for a new service.
High-intent search queries and answers about installing and using this skill.
Choosing the right SSO mode depends on your application capabilities, selecting from none, oidc, headers, basicauth, or gatekeeper modes. This guidance evaluates your service's authentication support to determine the most secure and compatible access control strategy.
Configuring oauth2-proxy for header-based authentication involves setting the SSO mode to headers. The Skill provides configuration details and examples for injecting authentication headers, ensuring your service receives validated identity information securely.
OIDC requires the application to handle the OpenID Connect flow directly, while header injection relies on a proxy to authenticate users and pass identity details via HTTP headers. The best approach depends on whether your app supports native OIDC or needs proxy-level authentication.
Yes, basic authentication translation can be used with existing APIs by setting the SSO mode to basicauth. This mode facilitates secure access control by translating authentication tokens into basic auth credentials that your API can process.
OIDC authentication flow failures often stem from misconfigured modes or app responsibility mismatches. The Skill details common troubleshooting steps for authentication flows, helping identify configuration errors in your access control setup.
MassimilianoPiliConfigure Keycloak OIDC clients, realms, and role mappings for SSO.
MassimilianoPiliImplement OAuth2 Proxy dual-instance deployment with Keycloak OIDC and nginx auth_request.
JansenAnalyticsConfigure Nginx or Caddy as a secure reverse proxy with SSL/TLS.
myapihqCreate OIDC identity providers and configure RS256 token verification.