fix(sso): encrypt SSO provider secrets at rest, and support encrypted SAML assertions - #8045

Open

waleedlatif1 wants to merge 9 commits into

fix/sso-oidc-secret-encryption

Commits on Sep 20, 2026

fix(sso): encrypt SSO provider secrets at rest
waleedlatif1
committed
0850719
fix(sso): mark encrypted provider secrets with an explicit prefix
waleedlatif1
committed
bdb8785
feat(sso): support encrypted SAML assertions and retire the registration scripts
waleedlatif1
committed
c73789c
fix(sso): verify the SAML key pair and keep the private key out of logs
waleedlatif1
committed
37dfa41
fix(sso): parse the SAML encryption certificate as X.509
waleedlatif1
committed
ce2496f
improvement(sso): use the chip switch for the SAML toggles and reuse a legacy key
waleedlatif1
committed
6aee268
fix(sso): label the SAML toggles for the chip control
waleedlatif1
committed
277abfe
fix(sso): recover gracefully from an unreadable saved SAML key
waleedlatif1
committed
386d7ae
fix(sso): keep the settings page reachable when a secret cannot be decrypted
waleedlatif1
committed
4e35422