stack/apps/web/src/lib/sso.ts

export type SsoProtocol = 'oidc' | 'saml';
export type SsoLoginMode = 'oidc' | 'saml' | null;

export interface SsoProviderDiscovery {
  id: 'authentik' | 'workos' | 'keycloak';
  name: string;
  protocols: SsoProtocol[];
  configured: boolean;
  loginMode: SsoLoginMode;
  callbackPath: string | null;
  teamSync: {
    enabled: boolean;
    claim: string | null;
  };
  samlFallback: {
    configured: boolean;
    loginUrl: string | null;
  };
  warnings: string[];
}