v0.3: SSO Implementation #23
Description
Completed Work
Implemented Single Sign-On for InferShield v0.3.
Features Delivered
- OIDC support (Okta + Azure AD)
- OAuth 2.0 Authorization Code Flow
- Database tables: sso_providers, sso_secrets
- Auto-provisioning with role mapping from groups claim
- Admin APIs for provider configuration
- Encrypted secrets storage (AES-256)
- Health check endpoint (/health/sso)
- Example configs: okta-config.json, azure-config.json
- Documentation: docs/SSO_SETUP.md, DEPLOYMENT.md
- Backwards compatible with non-SSO login
Commits
See commit history for implementation details.
Status
✅ Deployment-ready