mcpField
I
identity-federation

identity-federation

github.com/zhaoxuya520Security43.7k1.1k installsUpdated 5w ago
Repository

About identity-federation

A skill for authorized security testing of identity federation and SSO across SAML, OIDC, and OAuth. It maps flows between identity and service providers, checks common protocol and configuration flaws, and calls for documenting reproduction steps and impact.

Key features

  1. 01Map user, SP, IdP, and token flows
  2. 02Review SAML signatures and assertion handling
  3. 03Check OIDC, PKCE, state, and nonce
  4. 04Inspect redirect_uri and multi-tenant issuers
  5. 05Assess session fixation and logout invalidation

Use cases

  1. 01Test SAML assertion signature and tampering risks
  2. 02Check OIDC authorization flows and missing PKCE
  3. 03Audit redirects, state binding, and tenant configuration
  4. 04Document SSO findings with reproduction and impact

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/zhaoxuya520/reverse-skill --skill identity-federation

After installing, type/identity-federationin Claude Code to confirm it loaded.

Bundled filesreferences/sso-flow-checklist.md

Details

From the project README

Identity Federation (SAML / OIDC / OAuth)

ACTION REQUIRED（读完后立刻执行）

  1. NOW: 读取 precedent-pentest；SSO 测试账号与 IdP/SP 范围入 scope
  2. NOW: 禁止锁定真实用户账户的暴力尝试
  3. NEXT: 抓包工具与文档（元数据 URL）
  4. ACT: 协议流映射 → 常见错配 → 验证

适用场景

  • SAML Response 签名/断言篡改面（经典缺陷模式）
  • OIDC 隐式/授权码 + PKCE 缺失
  • redirect_uri / state / nonce 问题
  • IdP 与 SP 元数据、多租户 issuer 混淆
  • 与 api-security JWT 攻击互补（本 skill 偏联邦与 SSO 流）

工作流

□ 画清：User → SP → IdP → Token → SP
□ 收集：/.well-known/openid-configuration、SAML metadata
□ 检查：redirect_uri 精确匹配、state 绑定、PKCE
□ 检查：SAML 签名覆盖范围、algorithm 降级
□ 会话固定与登出失效

工具链

工具用途
Burp + SAML Raider 等断言编辑（授权）
jwt_toolJWT 段
浏览器 DevTools重定向链
IdP 管理日志审计

参考

  • references/sso-flow-checklist.md
  • ../api-security/ ../windows-ad/（企业 IdP）

路由上下文

上游: MASTER R37
下游: 纯 API JWT → api-security；云 IdP → cloud-k8s

任务完成自检

  • 是否映射完整 SSO 流？
  • 每个 Finding 是否有复现与影响？
  • Checklist？

Comments

Markdown supported