feat: SAML 2.0 en el gateway para tenants legacy (S-3)#21

Open

dherrero wants to merge 10 commits into

mainfrom

feat/s3-saml-gateway

Commits on Jun 11, 2026

feat(dto,gateway): shared SSO protocol contract + internal SAML config types (T-33)

dherrero
and
claude
committed
feat(gateway): SAML provider registry + multi-protocol federated registry (T-34)

dherrero
and
claude
committed
feat(gateway): SAML SP core — AuthnRequest login + SP metadata (T-35)

dherrero
and
claude
committed
feat(gateway): SAML ACS — full response validation + local session issuance (T-36)

dherrero
and
claude
committed
feat(gateway): SAML Single Logout, best-effort and integrated with the refresh family (T-37)

dherrero
and
claude
committed
feat(front): SAML providers in the login screen, zero-regression (T-38)

dherrero
and
claude
committed
test(gateway): SAML e2e attack suite + mandatory _ALLOWED_DOMAINS hardening (T-39)

dherrero
and
claude
committed
docs(saml): SECURITY.md SAML section, .env.example block, gateway AGENTS, roadmap (T-40)

dherrero
and
claude
committed

Commits on Jun 12, 2026