import type { AuditContext } from '@cclabsnz/sf-core';
import type { SecurityCheck, CheckResult } from '../SecurityCheck.js';
/**
 * Reviews external identity federation — Auth Providers and SAML SSO configs.
 * Every configured provider is a way into the org that does not use a Salesforce
 * password, so an unvetted or misconfigured provider (especially social login with
 * just-in-time user creation) can let attackers federate in or auto-provision
 * over-privileged users.
 */
export declare class AuthProvidersCheck implements SecurityCheck {
    readonly id = "auth-providers";
    readonly name = "Auth Providers & External IdPs";
    readonly category = "Authentication";
    readonly description = "Reviews configured Auth Providers and SAML SSO configurations \u2014 external login paths that bypass Salesforce credentials and can auto-provision users";
    run(ctx: AuditContext): Promise<CheckResult>;
}
//# sourceMappingURL=AuthProvidersCheck.d.ts.map