Single Sign-On (SSO)

Enterprise single sign-on via two protocols: OIDC/OAuth2 (Google Workspace, Microsoft Azure AD, Okta, Auth0, Keycloak, any standards-compliant OIDC provider) and SAML 2.0 (Microsoft Entra ID, Okta, PingFederate, and any SAML 2.0 IdP). Supports OIDC auto-discovery, authorization code flow, SAML assertion validation, automatic user provisioning, domain restriction, and a pending-approval workflow for manual user vetting.