Skills microsoft-azure-webjobs-extensions-authentication-events-dotnet
📦
microsoft-azure-webjobs-extensions-authentication-events-dotnet
Content revision r2 Safe ⚙️ External commands🌐 Network access
Build Microsoft Entra Authentication Event Functions
Custom authentication extensions require precise event contracts and response actions. This skill provides focused .NET patterns for Azure Functions and Microsoft Entra events.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "microsoft-azure-webjobs-extensions-authentication-events-dotnet" from https://skillstore.io/skills/sickn33-microsoft-azure-webjobs-extensions-authentication-events-dotnet.md and its manifest at https://skillstore.io/api/skills/sickn33-microsoft-azure-webjobs-extensions-authentication-events-dotnet/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Markdown detail
GET /skills/sickn33-microsoft-azure-webjobs-extensions-authentication-events-dotnet.md Signed manifest GET /api/skills/sickn33-microsoft-azure-webjobs-extensions-authentication-events-dotnet/manifest Signed lockfile GET /api/skills/sickn33-microsoft-azure-webjobs-extensions-authentication-events-dotnet/lockfileTest it
Using "microsoft-azure-webjobs-extensions-authentication-events-dotnet". Create a token issuance handler that adds department and employee identifier claims.
Expected outcome:
- Handler outline for the token issuance event
- Checks for a valid user identifier before lookup
- Returns only approved department and employee identifier claims
- Uses a continuation response when enrichment fails
Using "microsoft-azure-webjobs-extensions-authentication-events-dotnet". Review an attribute collection handler for production readiness.
Expected outcome:
- Validation gaps for missing and malformed attributes
- Recommended blocking and field-error responses
- Logging changes that protect personal data
- Tests for valid, invalid, missing, and provider-failure cases
Using "microsoft-azure-webjobs-extensions-authentication-events-dotnet". Plan a custom OTP delivery integration.
Expected outcome:
A delivery workflow covering provider authentication, timeout handling, protected logs, success responses, failure responses, and retry boundaries.
Security Audit
Safev5 • 8/4/2026 Open versioned report
All 54 static findings are false positives caused by Markdown formatting, illustrative code, reserved example URLs, official reference links, or ordinary guidance. No executable automation, prompt injection, data exfiltration intent, or malicious system reconnaissance was found.
1
Files scanned
451
Lines analyzed
0
Review items
0
False positives ignored
Risk Factors
⚙️ External commands (47)
SKILL.md:15-17 SKILL.md:17-25 SKILL.md:25-26 SKILL.md:26-27 SKILL.md:27-28 SKILL.md:28-36 SKILL.md:36-70 SKILL.md:70-76 SKILL.md:76-128 SKILL.md:128-134 SKILL.md:134-174 SKILL.md:174-180 SKILL.md:180-238 SKILL.md:238-244 SKILL.md:244-298 SKILL.md:298-304 SKILL.md:304-313 SKILL.md:313-315 SKILL.md:315-332 SKILL.md:332-334 SKILL.md:334-343 SKILL.md:343-349 SKILL.md:349-350 SKILL.md:350-351 SKILL.md:351-352 SKILL.md:352-353 SKILL.md:353-354 SKILL.md:354-355 SKILL.md:355-356 SKILL.md:356-357 SKILL.md:357-358 SKILL.md:358-359 SKILL.md:359-360 SKILL.md:360-361 SKILL.md:361-362 SKILL.md:362-363 SKILL.md:363-364 SKILL.md:364-365 SKILL.md:365-377 SKILL.md:377-384 SKILL.md:384-390 SKILL.md:390-399 SKILL.md:399-424 SKILL.md:424-430 SKILL.md:430 SKILL.md:431 SKILL.md:432
🌐 Network access (6)
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-microsoft-azure-webjobs-extensions-authentication-events-dotnet/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-microsoft-azure-webjobs-extensions-authentication-events-dotnet?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-microsoft-azure-webjobs-extensions-authentication-events-dotnet?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-microsoft-azure-webjobs-extensions-authentication-events-dotnet/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-microsoft-azure-webjobs-extensions-authentication-events-dotnet.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). microsoft-azure-webjobs-extensions-authentication-events-dotnet security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-microsoft-azure-webjobs-extensions-authentication-events-dotnet/audits/5BibTeX citation
@techreport{sickn33-sickn33-microsoft-azure-webjobs-extensions-authentication-events-dotnet-2026,
author = {sickn33},
title = {microsoft-azure-webjobs-extensions-authentication-events-dotnet security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/sickn33-microsoft-azure-webjobs-extensions-authentication-events-dotnet/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "microsoft-azure-webjobs-extensions-authentication-events-dotnet security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "sickn33"
date-released: "2026-08-04"
url: "https://skillstore.io/skills/sickn33-microsoft-azure-webjobs-extensions-authentication-events-dotnet/audits/5"
identifiers:
- type: other
value: "skillstore:sickn33-microsoft-azure-webjobs-extensions-authentication-events-dotnet:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
68
Community
83
Spec Compliance
What You Can Build
Enrich issued tokens
Design a token issuance function that retrieves trusted profile data and returns approved custom claims.
Validate sign-up attributes
Create attribute collection handlers that prefill values, reject invalid submissions, and normalize accepted data.
Plan custom OTP delivery
Structure an OTP event handler for an approved SMS, email, or push provider.
Try These Prompts
Create a token claims handler
Create a .NET Azure Function for OnTokenIssuanceStart. Add department and cost center claims from trusted input. Include validation and error handling.
Validate sign-up attributes
Build an OnAttributeCollectionSubmit handler. Validate email and display name, return field errors, and normalize accepted values.
Integrate an external profile service
Design token enrichment using an external profile API. Include authentication, timeouts, caching, response validation, fallback behavior, and privacy-safe logging.
Review a production authentication extension
Review my Entra authentication event design for security, latency, failure behavior, permissions, claims integrity, observability, and deployment readiness.
Best Practices
- Validate event payloads and external data before adding claims or modifying user attributes.
- Use managed identities, narrow permissions, strict timeouts, and explicit fallback behavior for dependencies.
- Log correlation identifiers while excluding OTP values, tokens, phone numbers, and unnecessary personal data.
Avoid
- Do not trust external profile fields or place unrestricted data into token claims.
- Do not throw unhandled exceptions that can interrupt the authentication flow.
- Do not place secrets, OTP values, access tokens, or personal identifiers in logs.
Frequently Asked Questions
Which Microsoft Entra events does this skill cover?
It covers token issuance start, attribute collection start, attribute collection submit, and custom OTP send events.
Does this skill deploy an Azure Function?
No. It provides implementation and configuration guidance, while deployment remains environment-specific.
Can it connect token enrichment to an external API?
Yes. It outlines the pattern, but you must add secure authentication, validation, timeouts, caching, and production error handling.
Does it include a working SMS provider integration?
No. The OTP example contains a placeholder method that must be connected to an approved provider.
Is the skill limited to in-process Azure Functions?
It includes WebJobs trigger examples and a brief isolated worker configuration example. Confirm model compatibility with your selected package version.
What should be tested before production use?
Test payload validation, claim integrity, permissions, dependency failures, timeout behavior, privacy-safe logging, and every authentication fallback path.