Commit graph

6 commits

Author SHA1 Message Date
rcourtman
4564742c18 Harden outbound SSO fetch boundaries 2026-04-01 16:36:44 +01:00
rcourtman
af14faa29b fix: normalize contextual focus summaries
Keep infrastructure, workloads, and storage summaries page-scoped during contextual row focus, and restore the missing mock and SAML contract drift required by the governed commit hook path.
2026-04-01 12:06:24 +01:00
rcourtman
5a0f5aa68b Harden SAML URL validation paths 2026-04-01 12:00:31 +01:00
rcourtman
d6536932fc Harden outbound URLs and file-backed storage 2026-03-29 12:47:55 +01:00
rcourtman
778a2577b6 feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
rcourtman
97701297c4 feat(sso): add SAML 2.0 and multi-provider SSO support
- Add SAML 2.0 Service Provider implementation using crewjam/saml
- Support IdP metadata from URL or raw XML
- Add multi-provider SSO configuration model
- Implement provider management API (CRUD operations)
- Add provider connection testing endpoint
- Add IdP metadata preview endpoint
- Add SSOProvidersPanel component for settings UI
- Support attribute-based role mapping (groups → Pulse roles)

API endpoints:
- GET/POST /api/security/sso/providers - List/create providers
- GET/PUT/DELETE /api/security/sso/providers/{id} - Provider CRUD
- POST /api/security/sso/providers/test - Test connection
- POST /api/security/sso/providers/metadata/preview - Preview metadata
- /api/saml/{id}/login, /acs, /metadata, /logout, /slo - SAML endpoints
2026-01-12 15:19:59 +00:00