feat: add SAML SSO with automatic org auto-join

messages/en.json

@@ -1250,6 +1250,60 @@
   "no-manifest-bundle": "No manifest",
   "no-zip-bundle": "No zip bundle",
   "of": "of",
+  "sso": "SSO",
+  "sso-description": "Configure Single Sign-On (SSO) with SAML to allow users from your organization to sign in with their corporate credentials and automatically join your organization.",
+  "sso-enterprise-required": "Enterprise Plan Required",
+  "sso-enterprise-required-description": "SSO with automatic user provisioning is available exclusively on the Enterprise plan. Upgrade to enable SAML authentication and domain-based auto-join for your organization.",
+  "sso-provider-config": "SSO Provider Configuration",
+  "sso-provider-config-description": "Configure your SAML identity provider to enable SSO for your organization.",
+  "sso-display-name": "Display Name",
+  "sso-display-name-placeholder": "e.g., Okta, Azure AD, Google Workspace",
+  "sso-metadata-url": "SAML Metadata URL",
+  "sso-metadata-url-placeholder": "https://your-idp.com/saml/metadata",
+  "sso-metadata-url-hint": "The URL where your identity provider publishes its SAML metadata XML.",
+  "sso-enable-provider": "Enable SSO Provider",
+  "sso-enabled": "SSO Enabled",
+  "sso-disabled": "SSO Disabled",
+  "sso-not-configured": "SSO not configured",
+  "sso-domains": "Email Domains",
+  "sso-domains-description": "Claim email domains to automatically add users with matching emails to your organization.",
+  "sso-add-domain": "Add Domain",
+  "sso-domain-placeholder": "example.com",
+  "sso-add": "Add",
+  "sso-no-domains": "No domains configured. Add a domain to enable automatic user provisioning.",
+  "sso-verified": "Verified",
+  "sso-pending-verification": "Pending verification",
+  "sso-auto-join": "Auto-join",
+  "sso-verify-domain": "Verify Domain",
+  "sso-delete-domain": "Delete Domain",
+  "sso-delete-domain-confirm": "Are you sure you want to delete the domain \"{domain}\"? Users will no longer be automatically added to your organization from this domain.",
+  "sso-verification-instructions": "DNS Verification Required",
+  "sso-verification-instructions-detail": "Add a TXT record to your DNS with the following values:",
+  "sso-auto-join-enabled": "Enable Auto-Join",
+  "sso-auto-join-description": "Automatically add new users with this email domain to your organization.",
+  "sso-default-role": "Default Role",
+  "sso-load-error": "Failed to load SSO configuration",
+  "sso-add-domain-error": "Failed to add domain",
+  "sso-domain-already-claimed": "This domain has already been claimed by another organization",
+  "sso-requires-enterprise": "SSO requires an Enterprise plan",
+  "sso-domain-added": "Domain added successfully",
+  "sso-verify-error": "Failed to verify domain",
+  "sso-domain-already-verified": "Domain is already verified",
+  "sso-domain-verified": "Domain verified successfully! Existing users have been added to your organization.",
+  "sso-verify-failed": "Domain verification failed. Please check your DNS configuration.",
+  "sso-delete-domain-error": "Failed to delete domain",
+  "sso-domain-deleted": "Domain deleted successfully",
+  "sso-update-domain-error": "Failed to update domain settings",
+  "sso-domain-updated": "Domain settings updated",
+  "sso-save-config-error": "Failed to save SSO configuration",
+  "sso-config-saved": "SSO configuration saved successfully",
+  "configure": "Configure",
+  "hide-config": "Hide Configuration",
+  "view-plans": "View Plans",
+  "role-read": "Read",
+  "role-upload": "Upload",
+  "role-write": "Write",
+  "role-admin": "Admin",
   "dependencies": "Dependencies",
   "native-dependencies": "Native Dependencies",
   "native-dependencies-description": "Native packages and their versions included in this bundle",

src/constants/organizationTabs.ts

@@ -5,12 +5,14 @@ import IconPlan from '~icons/heroicons/credit-card'
 import IconCredits from '~icons/heroicons/currency-dollar'
 import IconWebhook from '~icons/heroicons/globe-alt'
 import IconInfo from '~icons/heroicons/information-circle'
+import IconSSO from '~icons/heroicons/key'
 import IconSecurity from '~icons/heroicons/shield-check'
 import IconUsers from '~icons/heroicons/users'
 
 export const organizationTabs: Tab[] = [
   { label: 'general', key: '/settings/organization', icon: IconInfo },
   { label: 'members', key: '/settings/organization/members', icon: IconUsers },
+  { label: 'sso', key: '/settings/organization/sso', icon: IconSSO },
   // Security tab is added dynamically in settings.vue for super_admins only
   { label: 'security', key: '/settings/organization/security', icon: IconSecurity },
   { label: 'audit-logs', key: '/settings/organization/auditlogs', icon: IconAudit },