claims-authorization
Claims transformation and profile service patterns for Duende IdentityServer — IProfileService, IClaimsTransformation, claim type mapping, token claim filtering, extension grant validators, and dynamic claims loading.
Install
With your agent
Install OMGSkills skill "duendesoftware/duende-skills:skills/claims-authorization" into this agent's normal skills directory: use the OMGSkills MCP get_skill tool, install only the pinned_install commit and path, verify SKILL.md against pinned_install.skill_md_sha, and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/DuendeSoftware/duende-skills /tmp/duende-skills && ln -s /tmp/duende-skills/skills/claims-authorization ~/.claude/skills/claims-authorizationFrom README
Claims Transformation & Profile Service When to Use This Skill You are implementing or customizing IProfileService to control which claims are emitted into identity tokens, access tokens, or the userinfo endpoint. You need to map claims from an external identity provider (Google, Azure AD, SAML, etc.) into your IdentityServer user principal during login callback processing. You are configuring IdentityResource, ApiScope, or ApiResource UserClaims collections and need to understand how requested scopes drive ProfileDataRequestContext.RequestedClaimTypes. You are troubleshooting missing claims — claims are defined on resources but not appearing in tokens or on the userinfo endpoint. You need to load claims dynamically from a database or downstream service at token issuance time. You are implementing an IExtensionGrantValidator and need to emit custom claims into the resulting access token.
More from this repo
aspnetcore-authentication
ASP.NET Core authentication middleware configuration including OpenID Connect, JWT Bearer, cookie authentication,...
aspnetcore-authorization
ASP.NET Core authorization patterns including policy-based authorization, IAuthorizationHandler implementations,...
duende-bff
Duende BFF (Backend for Frontend) security framework for securing SPAs.