identity-federation
ZHzhaoxuya520991 installs
Find security gaps in single sign-on flows.
What it does
Assesses authorized federated identity flows and produces findings with reproduction steps and impact.
When to use it
Use for authorized assessments of federated identity systems, SSO misconfigurations, and token confusion.
How to use it
Give it an authorized IdP and SP assessment scope; it maps the SSO flow and reports findings with reproduction steps and impact.
What you provide
- the IdP and SP scope
Latest review
What you need · 4
Requires SSO test accounts included in the authorized IdP and SP assessment scope.
Requires reading precedent-pentest immediately before proceeding with the scoped SSO assessment.
Access · 2
This skill
/.well-known/openid-configuration
Read
Reads identity provider configuration
SAML metadata
Read
Reads SAML metadata