identityserver-saml
Configuring Duende IdentityServer as a SAML 2.0 Identity Provider (IdP): service provider registration, SSO and SLO flows, claim mappings, extensibility interfaces, and production deployment patterns.
Install
With your agent
Install OMGSkills skill "duendesoftware/duende-skills:skills/identityserver-saml" into this agent's normal skills directory: use the OMGSkills MCP get_skill tool, install only the pinned_install commit and path, verify SKILL.md against pinned_install.skill_md_sha, and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/DuendeSoftware/duende-skills /tmp/duende-skills && ln -s /tmp/duende-skills/skills/identityserver-saml ~/.claude/skills/identityserver-samlFrom README
SAML 2.0 Identity Provider When to Use This Skill Setting up IdentityServer as a SAML 2.0 Identity Provider (IdP) Registering SAML Service Providers with the SamlServiceProvider model Configuring SP-initiated SSO and Single Logout (SLO) flows Customizing claim-to-attribute mappings via ClaimMappings or extensibility interfaces Implementing production SP stores (EF Core, custom ISamlServiceProviderStore) Extending SAML behavior (custom NameID generation, signing, metadata, multi-tenant issuer) Linking an external SAML IdP as a federated authentication source (SP mode) Core Principles SAML 2.0 IdP support is built into Duende.IdentityServer (v8.0+) — no separate NuGet package Requires Standard (add-on), Advanced, or Custom Edition license SP-initiated SSO is the default; IdP-initiated SSO is opt-in per service provider SignAssertion is the default signing behavior; SignResponse is recommended for most deployments Use EF Core stores for service providers in production; in-memory is for...
More from this repo
aspnetcore-authentication
ASP.NET Core authentication middleware configuration including OpenID Connect, JWT Bearer, cookie authentication,...
aspnetcore-authorization
ASP.NET Core authorization patterns including policy-based authorization, IAuthorizationHandler implementations,...
claims-authorization
Claims transformation and profile service patterns for Duende IdentityServer — IProfileService, IClaimsTransformation,...