SSO

POST /api/v1/org/sso

Configure SSO provider for organization

---

GET /api/v1/org/sso

Get SSO configuration(s) for organization

---

POST /api/v1/org/sso/{configId}/test

Test SSO connection

---

POST /api/v1/org/sso/{configId}/activate

Activate SSO configuration

---

PATCH /api/v1/org/sso/{configId}

Update SSO configuration

---

DELETE /api/v1/org/sso/{configId}

Delete SSO configuration

---

GET /api/v1/auth/sso/{org_identifier}

Initiate SSO login (returns redirect URL)

---

POST /api/v1/auth/sso/oidc/callback

Handle OIDC callback

---

POST /api/v1/auth/sso/saml/callback

Handle SAML callback (SP-initiated and IdP-initiated)

---

GET /api/v1/auth/sso/saml/metadata/{org_id}

Get SAML SP metadata for IdP configuration

---