phasetwo プラグイン
Two Keycloak skills, split by what the work targets. `keycloak` routes realm-administration requests to the right guidance: passwordless login by magic link, email OTP, passkey-only WebAuthn, or a combined passkey-or-magic-link "0 password required" flow, corporate/enterprise SSO by email domain, social login and enterprise identity-provider federation (Entra ID, Okta, Auth0, and more), organization-membership login restriction for both local and federated logins, credential enrollment for existing users (passkey/TOTP via required actions or an emailed link), and Phase Two cluster/deployment provisioning. `securing-apps` covers the other direction — wiring Keycloak login into your own React, Angular, Vue, Next.js, mobile or backend application, validating its bearer tokens, and registering the OIDC client it needs.
phasetwo プラグインのインストール方法
両方のコマンドを Claude Code 内で実行してください。最初のコマンドで marketplace を一度追加し、2 番目のコマンドでプラグインをインストールします。
/plugin marketplace add p2-inc/keycloak-skills
/plugin install phasetwo@keycloak-skillsphasetwo の内容
プラグイン自身のファイルから読み込まれた 3 個のパーツ です。
SKILL 2
タスクが一致したときに Claude が読み込みます- keycloak
Use when doing Keycloak / Phase Two hosted Keycloak admin work. Passwordless login (magic link, email OTP, passkey WebAuthn, or passkey-or-magic-link "0 password required"); email OTP as a 2FA second factor; org-membership login restriction (password, federated, or magic-link); cluster/deployment provisioning; enrolling a credential (passkey/TOTP) onto users who already exist — and refusing cluster/deployment/realm DELETION. Also identity brokering: domain-routed corporate SSO; social login buttons (Google/GitHub/Microsoft); enterprise IdP federation — Entra ID, Okta, Auth0, ADFS, AWS SSO, PingOne, Salesforce and other OIDC/SAML IdPs; and IdP-initiated SSO tiles. Triggers: "2FA by email", "passkeys", "restrict login to org X", "spin up a cluster", "delete a cluster/realm", "set up my passkey", "enroll users in 2FA", "connect Okta/Entra ID", "SAML/OIDC SSO". Not WebAuthn/TOTP as a second factor, not LDAP/AD user federation, not app-side login code — that's `securing-apps`.
- securing-apps
Use when wiring Keycloak/OIDC login into your own app's source, or protecting an API with it. Browser login, logout and route protection for React, Angular, Vue, Next.js or a vanilla SPA (oidc-spa, keycloak-js, Auth.js); bearer-JWT validation in a Spring Boot, Express, FastAPI or Quarkus resource server (JWKS, issuer, audience); native login on Android, iOS or React Native (AppAuth, PKCE). Also registers or updates the app's OIDC client — redirect URIs, web origins, public vs confidential. Triggers: "add login to my React/Angular/Vue/Next.js app", "secure/protect my API", "validate a JWT", "invalid redirect_uri", "401 from my API", "CORS on the token call". **OIDC/OAuth2 only, not SAML.** Not realm, flow or IdP admin, not passwordless/SSO setup — that is the `keycloak` skill.
MCP server 1
プラグインとともに起動します- keycloakhttp
https://mcp.phasetwo.io/mcp
Claude Code での phasetwo の使用方法
SKILL にコマンドは不要です。リクエストが説明と一致したときに Claude が読み込みます。
更新、オフ、または削除
- プラグインを更新 (shell)
- claude plugin update phasetwo@keycloak-skills
- marketplace を更新
- /plugin marketplace update keycloak-skills
- 一時的にオフにする
- /plugin disable phasetwo@keycloak-skills
- 削除する
- /plugin uninstall phasetwo@keycloak-skills
phasetwo のスキル
- keycloakp2-inc/keycloak-skills
Use when doing Keycloak / Phase Two hosted Keycloak admin work. Passwordless login (magic link, email OTP, passkey WebAuthn, or passkey-or-magic-link "0 password required"); email OTP as a 2FA second factor; org-membership login restriction (password, federated, or magic-link); cluster/deployment provisioning; enrolling a credential (passkey/TOTP) onto users who already exist — and refusing cluster/deployment/realm DELETION. Also identity brokering: domain-routed corporate SSO; social login buttons (Google/GitHub/Microsoft); enterprise IdP federation — Entra ID, Okta, Auth0, ADFS, AWS SSO, PingOne, Salesforce and other OIDC/SAML IdPs; and IdP-initiated SSO tiles. Triggers: "2FA by email", "passkeys", "restrict login to org X", "spin up a cluster", "delete a cluster/realm", "set up my passkey", "enroll users in 2FA", "connect Okta/Entra ID", "SAML/OIDC SSO". Not WebAuthn/TOTP as a second factor, not LDAP/AD user federation, not app-side login code — that's `securing-apps`.
68件のファイル5スター - securing-appsp2-inc/keycloak-skills
Use when wiring Keycloak/OIDC login into your own app's source, or protecting an API with it. Browser login, logout and route protection for React, Angular, Vue, Next.js or a vanilla SPA (oidc-spa, keycloak-js, Auth.js); bearer-JWT validation in a Spring Boot, Express, FastAPI or Quarkus resource server (JWKS, issuer, audience); native login on Android, iOS or React Native (AppAuth, PKCE). Also registers or updates the app's OIDC client — redirect URIs, web origins, public vs confidential. Triggers: "add login to my React/Angular/Vue/Next.js app", "secure/protect my API", "validate a JWT", "invalid redirect_uri", "401 from my API", "CORS on the token call". **OIDC/OAuth2 only, not SAML.** Not realm, flow or IdP admin, not passwordless/SSO setup — that is the `keycloak` skill.
19件のファイル5スター
phasetwo プラグインに関する質問
phasetwo プラグインをインストールするにはどうすればよいですか。
Claude Code で /plugin marketplace add p2-inc/keycloak-skills を実行し、続いて /plugin install phasetwo@keycloak-skills を実行します。
phasetwo プラグインには何が含まれていますか。
phasetwo には 2 件のスキル, MCP サーバー が含まれています。
phasetwo プラグインを更新または削除するにはどうすればよいですか？
shell で claude plugin update phasetwo@keycloak-skills を使用して更新するか、/plugin の Installed タブから行ってください。削除するには /plugin uninstall phasetwo@keycloak-skills を使用してください。
phasetwo プラグインのライセンスは何ですか？
プラグインのマニフェストに記載されている CC-BY-SA-4.0 AND Apache-2.0 です。