Answers from the documentation; checking which model is on duty
Hi - I answer from the OpenSmartRoute documentation: routing, the API, plans and quotas, self-hosting. Ask away, or open a support ticket if you need a person.
Grounded in the docs - follow a source before acting on it.
windsurf-enterprise-sso - Skill - OpenSmartRoute
Skillv1.0.0
windsurf-enterprise-sso
Configure enterprise SSO integration for Windsurf. Activate when users mention "sso configuration", "single sign-on", "enterprise authentication", "saml setup", or "identity provider".
Imported from jeremylongshore/tons-of-skills-marketplace (plugins/saas-packs/skill-databases/windsurf/skills/windsurf-enterprise-sso/SKILL.md). Install upstream with npx skills add jeremylongshore/tons-of-skills-marketplace --skill windsurf-enterprise-sso. Copyright stays with the author (MIT).
Windsurf Enterprise Sso
Overview
This skill enables enterprise Single Sign-On (SSO) integration for Windsurf deployments. It supports SAML 2.0, OIDC/OAuth 2.0, and integration with major identity providers including Okta, Azure AD, and Google Workspace.
Prerequisites
Windsurf Enterprise subscription
Organization administrator access
Identity provider admin access
Understanding of SAML/OIDC protocols
Compliance requirements documented
Certificate management capabilities
Instructions
Prepare Identity Provider
Configure Windsurf SSO
Set Up Certificates
Configure Policies
Test and Enable
See ${CLAUDE_SKILL_DIR}/references/implementation.md for detailed implementation guide.
Output
Configured SSO integration
User attribute mappings
Group sync configuration
Audit logging setup
Error Handling
See ${CLAUDE_SKILL_DIR}/references/errors.md for comprehensive error handling.
Examples
See ${CLAUDE_SKILL_DIR}/references/examples.md for detailed examples.
Install windsurf-enterprise-sso and it becomes one more candidate the router can pick - when it fits.
A listing is a routing target with a manifest: what it does, which domains it covers, what it costs and who publishes it. Once installed it sits beside your own models and tools, is scored like any other candidate for each request, and shows up in the trace when it wins. Ratings come from workspaces that installed it, one per account.
When a provider is down or over quota the request moves on; the trace says it did.
Copy one of these into your project. Installing also returns the manifest and these snippets.
# after Install: the listing is in your workspace's routing pool - a plan picks it for its slotcurl-s-X POST https://api.opensmartroute.ai/api/v1/route -H 'Authorization: Bearer $OSR_API_KEY' -H 'Content-Type: application/json' -d '{"text": "...", "plan": true}'
Manifest
An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.
