mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-10-22 11:45:52 +00:00
rcourtman
82c54cc39b
Treat OIDC, SAML, and multi-provider SSO as included Community capabilities while retaining advanced_sso as a compatibility key. Remove SAML-specific paywalls and paid-upgrade copy from runtime, settings UI, entitlement snapshots, docs, journey proof, and subsystem contracts. Refs #1449
1.2 KiB
1.2 KiB
SAML SSO Provider Lifecycle
Objective
Validate the full SAML SSO provider lifecycle: create a SAML provider, verify it appears in the provider list, check SP metadata generation, test-connection validation, enable/disable toggling, and cleanup via delete.
Steps
- Log in as admin.
- GET
/api/security/sso/providers— verify the endpoint responds with 200. - POST
/api/security/sso/providers— create a SAML provider with stub IdP metadata. - GET
/api/security/sso/providers— verify the new provider appears. - GET
/api/saml/{providerID}/metadata— verify SP metadata XML is returned. - POST
/api/security/sso/providers/test— validate the IdP metadata. - Navigate to
/settings/security-sso— verify the SSO settings page renders. - PUT
/api/security/sso/providers/{id}— disable the provider, verify disabled. - PUT
/api/security/sso/providers/{id}— re-enable, verify enabled. - DELETE
/api/security/sso/providers/{id}— delete and verify removal.
Expected Outcomes
- Provider CRUD works end-to-end on the Community SSO capability.
- SSO settings page renders SSO-related content.
Environment Variables
PULSE_E2E_SAML_IDP_METADATA_URL— optional live IdP metadata URL.