How does this skill handle credential rotation?

It provides specialized TypeScript scripts that create new credentials, update secret managers, and verify connectivity before revoking old keys to ensure zero downtime.

How do I prevent Navan credentials from leaking in Git?

The skill includes automated commands to set up .env files and update .gitignore to ensure secrets are never committed to your repository.

Which identity providers are supported for SSO?

Navan supports major providers including Okta, Azure AD (Entra ID), AD FS, OneLogin, and Google Workspace via SAML 2.0 or OpenID Connect.

Is SCIM 2.0 supported for user management?

Yes, this skill includes instructions for configuring SCIM v2 endpoints to automate user creation, updates, and deactivations.

Does it include a security audit?

Yes, it features a comprehensive pre-production security review checklist covering everything from audit logs to webhook secrets.

Navan Security & Identity Hardening

Name: Navan Security & Identity Hardening
Author: jeremylongshore

byjeremylongshore

•

2,028

•

Seguridad y Pruebas

Secures Navan API integrations with OAuth 2.0 best practices, SSO configuration, and automated SCIM provisioning.

This skill provides comprehensive guidance for hardening Navan platform integrations by implementing security best practices for credential management and identity federation. It enables developers to securely store OAuth 2.0 credentials, automate secret rotation, configure SSO/SAML with major identity providers like Okta and Azure AD, and establish SCIM-based automated user lifecycle management. Whether you are performing a security audit or setting up a new enterprise travel integration, this skill ensures compliance with industry standards like SOC 2 and GDPR by providing actionable scripts and checklists.

Características Principales

01SCIM 2.0 setup for automated user onboarding and offboarding

02Step-by-step SSO/SAML configuration for Okta, Azure AD, and Google Workspace

03Automated API secret rotation scripts to mitigate credential leak risks

04Secure OAuth 2.0 credential management and environment variable hardening

05Comprehensive pre-production security audit checklist for enterprise compliance

062,028 GitHub stars

Casos de Uso

01Implementing periodic API credential rotation workflows to reduce security debt

02Configuring Single Sign-On (SSO) and automated user provisioning via SCIM

03Hardening an existing Navan API integration for enterprise security compliance

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills navan-security-basics

For use in Claude.ai and ChatGPT

Características Principales

01SCIM 2.0 setup for automated user onboarding and offboarding

02Step-by-step SSO/SAML configuration for Okta, Azure AD, and Google Workspace

03Automated API secret rotation scripts to mitigate credential leak risks

04Secure OAuth 2.0 credential management and environment variable hardening

05Comprehensive pre-production security audit checklist for enterprise compliance

062,028 GitHub stars

Casos de Uso

01Implementing periodic API credential rotation workflows to reduce security debt

02Configuring Single Sign-On (SSO) and automated user provisioning via SCIM

03Hardening an existing Navan API integration for enterprise security compliance

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills navan-security-basics

For use in Claude.ai and ChatGPT