Expert in Kanidm modern identity management system specializing in user/group management, OAuth2/OIDC, LDAP, RADIUS, SSH key management, WebAuthn, and MFA. Deep expertise in secure authentication flows, credential policies, access control, and platform integrations. Use when implementing identity management, SSO, authentication systems, or securing access to infrastructure.
Detected risks:
The kanidm-expert skill provides specialized guidance and expertise in managing modern identity systems using the Kanidm platform. It addresses the challenges of securely handling user accounts, group memberships, authentication mechanisms, and access policies in complex IT environments. By offering expert-level recommendations and best practices, this skill helps organizations implement robust identity and access management frameworks that prevent unauthorized access, credential compromise, and privilege escalation.
Key features of this skill include user and group management, OAuth2/OIDC provider configuration, LDAP and RADIUS integration, SSH key management, and support for modern authentication protocols such as WebAuthn and TOTP. It emphasizes secure credential policies, audit logging, account lifecycle management, and operational best practices like replication, backups, and high availability. The skill also covers PAM integration for Unix/Linux systems, service account management, and detailed access control through POSIX attributes and group memberships.
This skill is ideal for IT administrators, DevOps engineers, and security professionals responsible for identity management, single sign-on (SSO) implementations, and infrastructure access security. It is particularly useful in environments requiring compliance, strong authentication mechanisms, and centralized identity services. Organizations deploying Kanidm for modern identity management, secure authentication flows, or integrating legacy systems with OAuth2/OIDC and LDAP will benefit from the practical guidance and operational expertise provided by this skill.
You can follow the guidance provided to create, modify, and remove users and groups while ensuring proper attributes, POSIX integration, and adherence to account lifecycle policies.
Yes, it provides expertise on integrating Kanidm with legacy LDAP systems and network authentication via RADIUS, including attribute mapping and secure shared secrets.
Absolutely. It covers client registration, scope management, token flows, and PKCE configuration for public clients to implement secure SSO solutions.
Yes, identity and access management is critical. The skill emphasizes WebAuthn-first authentication, strong credential policies, account lockouts, audit logging, and least privilege access to minimize risk.
Yes, it includes best practices for replication, backup and restore procedures, and disaster recovery to ensure reliable and maintainable identity management deployments.
Quick Setup:
.claude/skills/Repository
martinholovsky/claude-skills-generator