Skip to content
Get packs

SAML Identity Federation with Azure AD

Guides setting up SAML 2.0 federation between on-premises AD / AD FS and Microsoft Entra ID, with audit scripts.

Source Download skill
Repository
mukul975/Anthropic-Cybersecurity-Skills
Stars
35,430
Licence
Apache-2.0
Files
7 files

What it does

Once installed, the agent can walk through designing and configuring single sign-on that links an organization's on-premises Active Directory (via AD FS or a third-party identity provider) to Microsoft Entra ID (formerly Azure AD). It explains the federation models (AD FS, password hash sync, pass-through authentication, third-party IdP), the SAML login flow, and the trust components such as signing certificates, claims rules and relying party trusts, and provides PowerShell steps for setup. It also includes Python scripts that can read Azure AD federation metadata and audit a federation configuration.

Great for

  • Identity or IT engineers planning a hybrid AD to Entra ID SSO deployment
  • Security teams reviewing an existing AD FS or SAML federation setup
  • Students learning how SAML federation and hybrid identity work

Skip it if

  • Production changes without review: the PowerShell steps modify domain federation settings and can affect sign-in for an entire organization if run incorrectly
  • Organizations without an Entra ID tenant or AD FS/third-party IdP, since the prerequisites cannot be met

Try asking

  • “Explain the difference between AD FS federation and password hash sync for our Entra ID tenant”
  • “Walk me through the SAML authentication flow between Entra ID and on-premises AD FS”
  • “Audit our Azure AD federation configuration and check certificate expiry”
  • “Draft claims rules that send UPN and email as SAML claims to a SaaS app”
Step-by-step guide: how to use SAML Identity Federation with Azure ADInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 7 original files, the Apache-2.0 licence and an attribution note.

    building-identity-federation-with-saml-azure-ad.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip building-identity-federation-with-saml-azure-ad.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip building-identity-federation-with-saml-azure-ad.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Review every PowerShell command and run in a test tenant before touching production federation settings
  • Use a least-privilege app registration with read-only Graph scopes when running the auditor, and store the client secret securely rather than in code
  • Check the reference files and official Microsoft documentation for current API versions, since the scripts and commands may change

What's inside

  • assets/template.md
  • references/api-reference.md
  • references/standards.md
  • references/workflows.md
  • scripts/agent.py
  • scripts/process.py
  • SKILL.md

Redistributed unmodified from mukul975/Anthropic-Cybersecurity-Skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.