windsurf-enterprise-rbac
Configure Windsurf enterprise SSO, RBAC, and organization-level controls. Use when implementing SSO/SAML, configuring role-based seat management, or setting up organization-wide Windsurf policies. Trigger with phrases like "windsurf SSO", "windsurf RBAC", "windsurf enterprise", "windsurf admin", "windsurf SAML", "windsurf team management". '
Profile →npx skills add jeremylongshore/claude-code-plugins-plus-skills --skill windsurf-enterprise-rbac --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Windsurf Enterprise RBAC ## Overview Manage enterprise Windsurf deployment: SSO/SAML configuration, role-based seat management, organization-wide AI policies, and admin portal controls. Covers Teams and Enterprise plan features. ## Prerequisites - Windsurf Teams ($30/user/mo) or Enterprise (custom pricing) plan - Organization admin access at windsurf.com/dashboard - Identity provider for SSO (Enterprise only): Okta, Entra ID, Google Workspace ## Instructions ### Step 1: Configure SSO / SAML (Enterprise Only) Navigate to Admin Dashboard > Security > SSO: ```yaml # SSO Configuration Steps sso_setup: 1_choose_idp: supported: ["Okta", "Microsoft Entra ID", "Google Workspace", "Any SAML 2.0 IdP"] 2_configure_saml: entity_id: "https://windsurf.com/saml/your-org-id" acs_url: "https://windsurf.com/saml/callback" # Get these from Admin Dashboard > SSO > SAML Configuration 3_idp_settings: # Configure in your IdP: sign_on_url: "https://windsurf.com/saml/login/your-org-id" audience_uri: "https://windsurf.com/saml/your-org-id" name_id_format: "emailAddress" attribute_statements: email: "user.email" firstName: "user.firstName" lastName: "user.lastName" 4_enforce: enforce_sso: true # Block pass
- Overview
- Prerequisites
- Instructions
- Step 1: Configure SSO / SAML (Enterprise Only)
- Step 2: Configure Roles and Permissions
- Step 3: Organization-Wide AI Policies
- Step 4: Seat Management Workflow
- Step 5: Audit and Compliance
- Step 6: Service Keys for API Access (Enterprise)
- Error Handling
- Examples
- Quick Admin Dashboard Tasks
- Team Structure Example
- Resources
What does the windsurf-enterprise-rbac skill do?
Configure Windsurf enterprise SSO, RBAC, and organization-level controls. Use when implementing SSO/SAML, configuring role-based seat management, or setting up organization-wide Windsurf policies. Trigger with phrases like "windsurf SSO", "windsurf RBAC", "windsurf enterprise", "windsurf admin", "windsurf SAML", "windsurf team management". '
How do I install it?
Run `npx skills add jeremylongshore/claude-code-plugins-plus-skills --skill windsurf-enterprise-rbac --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From jeremylongshore/claude-code-plugins-plus-skills, a repository with 2,630 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.