Can I map my existing IdP groups to Windsurf roles?

Yes, the skill includes logic to map groups from providers like Okta, Azure AD, or Google Workspace directly to Windsurf roles.

Does this skill include audit logging?

Yes, it provides a standardized Audit Trail interface to track user actions, resource access, and failed permission attempts for compliance.

What roles are included by default?

The skill defines four standard roles: Admin (Full access), Developer (Read/Write), Viewer (Read-only), and Service (API-only).

What authentication protocols are supported?

The skill provides implementation patterns for both SAML 2.0 and OAuth2/OpenID Connect (OIDC) protocols.

Windsurf Enterprise RBAC & SSO

Name: Windsurf Enterprise RBAC & SSO
Author: Brmbobo

byBrmbobo

Security & Testing

Implements enterprise-grade Single Sign-On (SSO) and role-based access control (RBAC) for Windsurf organizational management.

About

This skill provides a standardized framework for configuring secure, production-ready identity management within Windsurf environments. It streamlines the implementation of SAML and OIDC integrations, allows for granular mapping of identity provider groups to internal roles, and establishes robust organization-level controls. By providing ready-to-use middleware for permission checks and comprehensive audit logging templates, it ensures that enterprise integrations meet strict security compliance standards while maintaining developer productivity.

Key Features

Organization-level security enforcement settings
Granular permission middleware for API protection
0 GitHub stars
SAML 2.0 and OAuth2/OIDC integration templates
Automated audit trail and compliance logging
Pre-defined role mapping for Admins, Developers, and Viewers

Use Cases

Integrating corporate identity providers with Windsurf workflows
Implementing strict access control for enterprise-level repositories
Establishing security audit trails for regulatory compliance

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add brmbobo/web2podcast windsurf-enterprise-rbac

For use in Claude.ai and ChatGPT

Download Skill

GitHub