• Okta SSO with OIDC-based authentication and IdP-initiated sign-in
• SCIM 2.0 provisioning — automatic user and group sync from your identity provider
• Domain verification for SSO with DNS TXT record guidance and in-dashboard status
• Sign-in redirect URI surfaced in setup form for seamless Okta app configuration
• 6-role permission model: Owner, Admin, Member, Developer, Viewer, and Billing
• RBAC enforced across all dashboard actions and server-side mutations
• Billing role isolates billing management from content operations

Enterprise v1.0