This skill enables enterprise Single Sign-On (SSO) integration for Windsurf deployments. It supports SAML 2.0, OIDC/OAuth 2.0, and integration with major identity providers including Okta, Azure AD, and Google Workspace. Proper SSO configuration ensures secure authentication, simplified user management, and compliance with enterprise security requirements.
Prerequisites
Windsurf Enterprise subscription
Organization administrator access
Identity provider admin access
Understanding of SAML/OIDC protocols
Compliance requirements documented
Certificate management capabilities
Instructions
Prepare Identity Provider
Configure Windsurf SSO
Set Up Certificates
Configure Policies
Test and Enable
See {baseDir}/references/implementation.md for detailed implementation guide.
Output
Configured SSO integration
User attribute mappings
Group sync configuration
Audit logging setup
Error Handling
See {baseDir}/references/errors.md for comprehensive error handling.
Examples
See {baseDir}/references/examples.md for detailed examples.
Run npx skillmds@latest add tomevault-io/helixdevelopment-helixagent-windsurf-enterprise-sso in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Windsurf Enterprise Sso It is listed under Coding & Dev Tools on SkillMD.
This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
tomevault-io (@tomevault-io) published this skill. Their other Agent Skills are listed on their SkillMD profile.
tomevault-io