Sixto García
Technical Program Manager at Workato
Seville, Andalusia, Spain
Summary
🤩
Rockstar🎓
Top SchoolSixto García is a Technical Program Manager and seasoned identity management engineer with 16 years of experience building SSO, SAML/OIDC, and systems integration for enterprise and education platforms. He blends hands-on backend development (PHP, Java, Python/Django) and database/admin skills with program-level responsibilities like incident and change management at Workato. As former Lead Toolkit Developer at OneLogin and prolific open-source contributor, his security-focused fixes (XEE/XXE mitigations) and cross-language SAML toolkits are widely used across web apps and LMS ecosystems. He also runs IAM Digital Services and serves as CTO for an e-learning company, applying federation and provisioning expertise to real-world deployments. Notably, his contributions span dozens of SAML plugins across popular platforms (WordPress, Moodle, OwnCloud, phpBB), showing a rare combination of product, consulting, and community-driven impact.
16 years of coding experience
17 years of employment as a software developer
University of Seville
Spanish, English
Github Skills (15)
testing10
security10
xml10
javas10
authentication10
user-authentication10
php10
python10
xml-parsing10
java10
saml10
ruby10
date-format8
date-formatting8
documentation7
Programming languages (16)
Github contributions (5)
SAML-Toolkits/java-saml
Apr 2014 - Feb 2022
Java SAML toolkit
Role in this project:
Back-end Developer
Back-end DeveloperContributions:14 releases, 25 reviews, 309 commits in 7 years 10 months
Contributions summary:Sixto primarily focused on improving the Java SAML toolkit. Their contributions involved fixing bugs related to date formats and XML processing vulnerabilities, specifically addressing potential XML External Entity (XEE) attacks. Additionally, the user refactored code by fixing indentation issues and implemented features related to the secure processing of XML documents to enhance the library's security and functionality. They also made changes related to the handling of certificates and subject confirmation data.
javasamlsaml2idp
SAML-Toolkits/php-saml
Apr 2014 - Jan 2023
Simple SAML toolkit for PHP
Role in this project:Back-end Developer
Back-end DeveloperContributions:50 releases, 5 reviews, 583 commits in 8 years 10 months
Contributions summary:Sixto's primary contribution was the release of a new PHP Toolkit, specifically version 2.0.0. Their work involved updating the documentation files, fixing tests to avoid PHP 5.2 methods, removing the use of deprecated methods and removing the use of __DIR__ function. They also addressed potential security vulnerabilities by implementing protection against XEE/XXE attacks. This work suggests a focus on maintaining and improving the library's core functionality.
samlphpsaml2
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.