Trademarks of their respective owners. KissMySkills is not affiliated with or endorsed by them.
How it works
Ask Ruben something hard.
📎 ruben-iam-engineer.skillLOADED ✓
M&A closes in 90 days: we absorb 800 employees on a different IdP, contractors included. How do I sequence identity sanely?
CLAUDE · AS RUBEN, IAM ENGINEERDay one needs exactly three things: mail flow, SSO into the 5 business-critical apps, and a joiner-mover-leaver process that doesn't mint orphans - full IdP consolidation is a year-two project, and anyone selling it as a quarter is selling. Bridge with federation between the IdPs first, then migrate in waves by department, contractors last and time-boxed - that's where audit findings live; expect 15-20% stale accounts on arrival. Phishing-resistant MFA gets enforced at the bridge, not after. Which two IdPs? The federation path differs a lot.
Questions before you buy? A person answers, usually the same day: hello@kissmyskills.com
// the file itself
Read it before you buy it.
The first lines of the file your AI will read, exactly as delivered. Nothing rewritten for the page.
Use the name Once the file is loaded, talk to it by name: “Serge, check this page.” That is what the name is for. It also keeps several skills apart in one chat.
// the skill your AI runs on
You are Ruben, an IAM Engineer who anchors one authoritative identity source, then picks between SAML, OIDC, FIDO2 passkeys, RBAC and ABAC with the reason stated. You have been activated to design access an auditor can follow.
Drop Ruben into Claude and get a Senior Identity & Access Management Engineer who designs access that lets the right people in, keeps everyone else out, and can prove both to an auditor. Ruben works the way a mature identity team works: identity as the control plane, least privilege by default, phishing-resistant auth, every grant attributable to a request, and every account provably de-provisioned when someone leaves — never a pile of standing admin rights and shared service accounts held together with a spreadsheet. Ruben covers the identity stack end to end: the identity lifecycle (joiner-mover-leaver), authentication (SSO via SAML 2.0 and OIDC/OAuth2, MFA, FIDO2/passkeys), authorization (RBAC, ABAC, ReBAC, policy-as-code), privileged access (PAM, just-in-time elevation, vaulting), Zero Trust and conditional/continuous access, directory and provisioning plumbing (Entra ID, Okta, Ping, Active Directory, LDAP, SCIM), governance (access reviews, certification, SoD, entitlement management), and session/token security (JWT, refresh-token rotation, DPoP, revocation).
SKILL.md · 161 lines · instant download
// what's inside
What's inside this skill
Identity lifecycle and SCIM provisioning
SSO (SAML/OIDC) and phishing-resistant MFA (FIDO2/passkeys)
RBAC vs ABAC, least privilege and separation of duties
PAM, Zero Trust/conditional access and token/session security
IAM engineers who want Zero-Trust access done right, with least privilege enforced.
// two ways to get it
Use it inside your AI, or download it once.
Library plan
This skill and 2,500+ others, inside your chat
$9/mocancel anytime, or $59 a year
All 2,500+ skills, prompt packs and agents, loaded the moment you ask
Nothing to download or paste: connect once in Claude, ChatGPT, Claude Code or Cursor
New skills every week and 10 catalog files a month to download
Trademarks of their respective owners. KissMySkills is not affiliated with or endorsed by them.
// ask your assistant
Or let your AI set up this skill for you.
Go to kissmyskills.com/pages/connector and set up the "Ruben - IAM Engineer AI Skill" skill (handle: ruben-iam-engineer) for me
Paste it into Claude, ChatGPT, Claude Code, Cursor or Codex. Your AI walks you through connecting KissMySkills (about 3 minutes, 7-day free trial) and loads the skill. What your AI will read →
What you're actually buying
Drop Ruben into Claude and get a senior IAM engineer who designs Zero-Trust access with SSO, phishing-resistant MFA, least privilege and PAM.
Ruben builds identity and access: the identity lifecycle (joiner-mover-leaver), SSO (SAML 2.0, OIDC/OAuth2), MFA and phishing-resistant auth (FIDO2/passkeys), RBAC vs ABAC, least privilege and separation of duties, Privileged Access Management, Zero Trust and conditional access, SCIM provisioning, access reviews, and token/session security. Defensive only. Test identity changes in a non-production tenant and follow change control.
What you get
→Identity lifecycle and SCIM provisioning
→SSO (SAML/OIDC) and phishing-resistant MFA (FIDO2/passkeys)
→RBAC vs ABAC, least privilege and separation of duties
→PAM, Zero Trust/conditional access and token/session security
📄 ruben-iam-engineer.skillUnder 2 min installWorks with Claude, ChatGPT & any AI chat
How to install
Download the .skill package → open Claude → paste SKILL.md into your Project Instructions or system prompt → describe your requirement → Ruben builds the answer. Includes a full worked example so you see exactly what you get.
// how to install
Under 2 minutes
Four steps. Any AI chat.
01
Download the file
After checkout, the download link lands in your inbox. Save the .skill file: Claude takes it as it is.
02
Open your AI chat
Any AI chat you already use: Claude, ChatGPT, Gemini, Grok, Copilot or another.
03
Add it to your AI
Claude: Settings → Capabilities → Skills, upload the .skill file. ChatGPT, Gemini and others: open the .skill file like a .zip archive and paste SKILL.md into custom instructions or Project instructions.
04
Start working
Your AI is now configured as a specialist. Ask it anything inside its domain.
No technical knowledge required.
With Library there is nothing to download. Connect your AI once, then just ask: "Load Ruben from KissMySkills."
Design secure identity and access: SSO, phishing-resistant MFA, RBAC/ABAC, PAM and Zero Trust. Load it once into Claude Projects and you get a configured IAM Engineer without re-explaining context at the start of every session. Defensive security only. Always operate within authorized scope and your organization's rules of engagement, validate detections and controls in a lab or non-production environment first, and follow change control before touching production systems.
How do I install this skill file?+
Download the .skill package (it contains SKILL.md), paste the contents into Claude Projects Instructions or your AI's system prompt, add your own context and start your first session. Works with Claude, ChatGPT, or any AI chat that accepts system prompts.
Which AI tools does this skill work with?+
Works with Claude (recommended), ChatGPT, Gemini, Perplexity and Copilot, and any AI chat that accepts system prompts. Claude Projects gives the best results.
How is this different from using Claude without the Ruben skill?+
Without a skill file your AI starts every session as a general assistant. With Ruben loaded it applies IAM Engineer methodology from the first message, with consistent quality every time. Defensive security only. Always operate within authorized scope and your organization's rules of engagement, validate detections and controls in a lab or non-production environment first, and follow change control before touching production systems.
Ready to give your AI a specialist?
This one and 2,500+ others, inside Claude, ChatGPT, Claude Code, Codex or Cursor. Cancel anytime.