What problem does it solve? Federated identity systems like SAML, OIDC, and OAuth2 are complex, and misconfigurations in SSO flows often go undetected until exploited. This Skill gives security assessors a repeatable methodology for mapping federation flows and systematically checking for signature, redirect, and token validation weaknesses during authorized engagements. ## Core Features & Use Cases - Protocol Flow Mapping: Guides mapping of the full User → SP → IdP → Token chain, including metadata collection from /.well-known/openid-configuration and SAML metadata endpoints. - Misconfiguration Checklist: Covers redirect_uri exact matching, state/nonce binding, PKCE for public clients, SAML signature coverage, and algorithm downgrade checks. - Tooling Guidance: Recommends Burp with SAML Raider for assertion editing, jwt_tool for JWT analysis, and browser DevTools for redirect chain inspection. - Use Case: During an authorized pentest of an enterprise SSO deployment, use this Skill to verify that the SP validates SAML signatures across the full response, that OIDC flows enforce PKCE, and that logout properly revokes sessions. ## Quick Start Assess the SAML and OIDC single sign-on configuration of the authorized target application for signature, redirect_uri, and token validation weaknesses.
