How to use
- Copy the installation command and review the source package before installing it in your own agent environment.
- Check the source document for required tools, credentials and supported hosts.
- Describe your input and desired deliverable; review the output against the source material.
npx skills add https://github.com/zhaoxuya520/reverse-skill --skill identity-federationBefore you start
- Installation does not include a model subscription, API allowance or permission to access your files.
- Repository stars and installation counts describe activity, not an independent quality or security test.
Original skill document
Rendered from the source repository. Headings, examples, code, tables, links, and referenced images are preserved.
Identity Federation (SAML / OIDC / OAuth)
ACTION REQUIRED（读完后立刻执行）
NOW: 读取 precedent-pentest；SSO 测试账号与 IdP/SP 范围入 scopeNOW: 禁止锁定真实用户账户的暴力尝试NEXT: 抓包工具与文档（元数据 URL）ACT: 协议流映射 → 常见错配 → 验证
适用场景
- SAML Response 签名/断言篡改面（经典缺陷模式）
- OIDC 隐式/授权码 + PKCE 缺失
- redirect_uri / state / nonce 问题
- IdP 与 SP 元数据、多租户 issuer 混淆
- 与
api-securityJWT 攻击互补（本 skill 偏联邦与 SSO 流）
工作流
text
□ 画清：User → SP → IdP → Token → SP
□ 收集：/.well-known/openid-configuration、SAML metadata
□ 检查：redirect_uri 精确匹配、state 绑定、PKCE
□ 检查：SAML 签名覆盖范围、algorithm 降级
□ 会话固定与登出失效工具链
| 工具 | 用途 |
|---|---|
| Burp + SAML Raider 等 | 断言编辑（授权） |
| jwt_tool | JWT 段 |
| 浏览器 DevTools | 重定向链 |
| IdP 管理日志 | 审计 |
参考
references/sso-flow-checklist.md../api-security/../windows-ad/（企业 IdP）
路由上下文
上游: MASTER R37 下游: 纯 API JWT → api-security；云 IdP → cloud-k8s
任务完成自检
- [ ] 是否映射完整 SSO 流？
- [ ] 每个 Finding 是否有复现与影响？
- [ ] Checklist？
