identityserver-saml
Configuring Duende IdentityServer as a SAML 2.0 Identity Provider (IdP): service provider registration, SSO and SLO flows, claim mappings, extensibility interfaces, and production deployment patterns.
Install
With your agent
Install OMGSkills skill "duendesoftware/duende-skills:skills/identityserver-saml" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/DuendeSoftware/duende-skills /tmp/duende-skills && ln -s /tmp/duende-skills/skills/identityserver-saml ~/.claude/skills/identityserver-samlFrom README
SAML 2.0 Identity Provider When to Use This Skill Setting up IdentityServer as a SAML 2.0 Identity Provider (IdP) Registering SAML Service Providers with the SamlServiceProvider model Configuring SP-initiated SSO and Single Logout (SLO) flows Customizing claim-to-attribute mappings via ClaimMappings or extensibility interfaces Implementing production SP stores (EF Core, custom ISamlServiceProviderStore) Extending SAML behavior (custom NameID generation, signing, metadata, multi-tenant issuer) Linking an external SAML IdP as a federated authentication source (SP mode) Core Principles SAML 2.0 IdP support is built into Duende.IdentityServer (v8.0+) — no separate NuGet package Requires Standard (add-on), Advanced, or Custom Edition license SP-initiated SSO is the default; IdP-initiated SSO is opt-in per service provider SignAssertion is the default signing behavior; SignResponse is recommended for most deployments Use EF Core stores for service providers in production; in-memory is for...
More from this repo
aspnetcore-authentication
ASP.NET Core authentication middleware configuration including OpenID Connect, JWT Bearer, cookie authentication,...
aspnetcore-authorization
ASP.NET Core authorization patterns including policy-based authorization, IAuthorizationHandler implementations,...
claims-authorization
Claims transformation and profile service patterns for Duende IdentityServer — IProfileService, IClaimsTransformation,...