Kanidm Expert

If you're implementing Kanidm for identity management, this skill knows the full stack: OAuth2/OIDC for SSO, LDAP for legacy system compatibility, RADIUS for network auth, SSH key distribution, and WebAuthn/MFA setup. The source material is solid on the TDD approach, showing pytest examples for OAuth2 flows and LDAP connections before you configure anything. What stands out is the security-first stance with its CRITICAL risk rating, which is appropriate since misconfigurations here mean unauthorized access to everything downstream. Use this when you're moving beyond basic auth and need proper identity infrastructure with modern standards plus backward compatibility.