@idp.global/catalog 2.2.0 → 3.0.0

package/dist_ts_web/elements/idp-sso-connection-form.js

@@ -0,0 +1,637 @@
+var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+    function accept(f) { if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected"); return f; }
+    var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+    var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+    var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+    var _, done = false;
+    for (var i = decorators.length - 1; i >= 0; i--) {
+        var context = {};
+        for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+        for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+        context.addInitializer = function (f) { if (done) throw new TypeError("Cannot add initializers after decoration has completed"); extraInitializers.push(accept(f || null)); };
+        var result = (0, decorators[i])(kind === "accessor" ? { get: descriptor.get, set: descriptor.set } : descriptor[key], context);
+        if (kind === "accessor") {
+            if (result === void 0) continue;
+            if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+            if (_ = accept(result.get)) descriptor.get = _;
+            if (_ = accept(result.set)) descriptor.set = _;
+            if (_ = accept(result.init)) initializers.unshift(_);
+        }
+        else if (_ = accept(result)) {
+            if (kind === "field") initializers.unshift(_);
+            else descriptor[key] = _;
+        }
+    }
+    if (target) Object.defineProperty(target, contextIn.name, descriptor);
+    done = true;
+};
+var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
+    var useValue = arguments.length > 2;
+    for (var i = 0; i < initializers.length; i++) {
+        value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+    }
+    return useValue ? value : void 0;
+};
+import { DeesElement, html, property, state, customElement, css } from '@design.estate/dees-element';
+import { idpElementStyles } from './tokens.js';
+import './idp-badge.js';
+import './idp-button.js';
+import './idp-icon.js';
+import './idp-input.js';
+let IdpSsoConnectionForm = (() => {
+    let _classDecorators = [customElement('idp-sso-connection-form')];
+    let _classDescriptor;
+    let _classExtraInitializers = [];
+    let _classThis;
+    let _classSuper = DeesElement;
+    let _connections_decorators;
+    let _connections_initializers = [];
+    let _connections_extraInitializers = [];
+    let _spDetails_decorators;
+    let _spDetails_initializers = [];
+    let _spDetails_extraInitializers = [];
+    let _formOpen_decorators;
+    let _formOpen_initializers = [];
+    let _formOpen_extraInitializers = [];
+    let _manualIdp_decorators;
+    let _manualIdp_initializers = [];
+    let _manualIdp_extraInitializers = [];
+    let _formDisplayName_decorators;
+    let _formDisplayName_initializers = [];
+    let _formDisplayName_extraInitializers = [];
+    let _formEmailDomains_decorators;
+    let _formEmailDomains_initializers = [];
+    let _formEmailDomains_extraInitializers = [];
+    let _formMetadataXml_decorators;
+    let _formMetadataXml_initializers = [];
+    let _formMetadataXml_extraInitializers = [];
+    let _formEntityId_decorators;
+    let _formEntityId_initializers = [];
+    let _formEntityId_extraInitializers = [];
+    let _formSsoUrl_decorators;
+    let _formSsoUrl_initializers = [];
+    let _formSsoUrl_extraInitializers = [];
+    let _formCertificate_decorators;
+    let _formCertificate_initializers = [];
+    let _formCertificate_extraInitializers = [];
+    let _formProvisioningMode_decorators;
+    let _formProvisioningMode_initializers = [];
+    let _formProvisioningMode_extraInitializers = [];
+    let _formDefaultRoles_decorators;
+    let _formDefaultRoles_initializers = [];
+    let _formDefaultRoles_extraInitializers = [];
+    let _formGroupMappings_decorators;
+    let _formGroupMappings_initializers = [];
+    let _formGroupMappings_extraInitializers = [];
+    let _formError_decorators;
+    let _formError_initializers = [];
+    let _formError_extraInitializers = [];
+    var IdpSsoConnectionForm = class extends _classSuper {
+        static { _classThis = this; }
+        static {
+            const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
+            _connections_decorators = [property({ type: Array })];
+            _spDetails_decorators = [property({ type: Object })];
+            _formOpen_decorators = [state()];
+            _manualIdp_decorators = [state()];
+            _formDisplayName_decorators = [state()];
+            _formEmailDomains_decorators = [state()];
+            _formMetadataXml_decorators = [state()];
+            _formEntityId_decorators = [state()];
+            _formSsoUrl_decorators = [state()];
+            _formCertificate_decorators = [state()];
+            _formProvisioningMode_decorators = [state()];
+            _formDefaultRoles_decorators = [state()];
+            _formGroupMappings_decorators = [state()];
+            _formError_decorators = [state()];
+            __esDecorate(this, null, _connections_decorators, { kind: "accessor", name: "connections", static: false, private: false, access: { has: obj => "connections" in obj, get: obj => obj.connections, set: (obj, value) => { obj.connections = value; } }, metadata: _metadata }, _connections_initializers, _connections_extraInitializers);
+            __esDecorate(this, null, _spDetails_decorators, { kind: "accessor", name: "spDetails", static: false, private: false, access: { has: obj => "spDetails" in obj, get: obj => obj.spDetails, set: (obj, value) => { obj.spDetails = value; } }, metadata: _metadata }, _spDetails_initializers, _spDetails_extraInitializers);
+            __esDecorate(this, null, _formOpen_decorators, { kind: "accessor", name: "formOpen", static: false, private: false, access: { has: obj => "formOpen" in obj, get: obj => obj.formOpen, set: (obj, value) => { obj.formOpen = value; } }, metadata: _metadata }, _formOpen_initializers, _formOpen_extraInitializers);
+            __esDecorate(this, null, _manualIdp_decorators, { kind: "accessor", name: "manualIdp", static: false, private: false, access: { has: obj => "manualIdp" in obj, get: obj => obj.manualIdp, set: (obj, value) => { obj.manualIdp = value; } }, metadata: _metadata }, _manualIdp_initializers, _manualIdp_extraInitializers);
+            __esDecorate(this, null, _formDisplayName_decorators, { kind: "accessor", name: "formDisplayName", static: false, private: false, access: { has: obj => "formDisplayName" in obj, get: obj => obj.formDisplayName, set: (obj, value) => { obj.formDisplayName = value; } }, metadata: _metadata }, _formDisplayName_initializers, _formDisplayName_extraInitializers);
+            __esDecorate(this, null, _formEmailDomains_decorators, { kind: "accessor", name: "formEmailDomains", static: false, private: false, access: { has: obj => "formEmailDomains" in obj, get: obj => obj.formEmailDomains, set: (obj, value) => { obj.formEmailDomains = value; } }, metadata: _metadata }, _formEmailDomains_initializers, _formEmailDomains_extraInitializers);
+            __esDecorate(this, null, _formMetadataXml_decorators, { kind: "accessor", name: "formMetadataXml", static: false, private: false, access: { has: obj => "formMetadataXml" in obj, get: obj => obj.formMetadataXml, set: (obj, value) => { obj.formMetadataXml = value; } }, metadata: _metadata }, _formMetadataXml_initializers, _formMetadataXml_extraInitializers);
+            __esDecorate(this, null, _formEntityId_decorators, { kind: "accessor", name: "formEntityId", static: false, private: false, access: { has: obj => "formEntityId" in obj, get: obj => obj.formEntityId, set: (obj, value) => { obj.formEntityId = value; } }, metadata: _metadata }, _formEntityId_initializers, _formEntityId_extraInitializers);
+            __esDecorate(this, null, _formSsoUrl_decorators, { kind: "accessor", name: "formSsoUrl", static: false, private: false, access: { has: obj => "formSsoUrl" in obj, get: obj => obj.formSsoUrl, set: (obj, value) => { obj.formSsoUrl = value; } }, metadata: _metadata }, _formSsoUrl_initializers, _formSsoUrl_extraInitializers);
+            __esDecorate(this, null, _formCertificate_decorators, { kind: "accessor", name: "formCertificate", static: false, private: false, access: { has: obj => "formCertificate" in obj, get: obj => obj.formCertificate, set: (obj, value) => { obj.formCertificate = value; } }, metadata: _metadata }, _formCertificate_initializers, _formCertificate_extraInitializers);
+            __esDecorate(this, null, _formProvisioningMode_decorators, { kind: "accessor", name: "formProvisioningMode", static: false, private: false, access: { has: obj => "formProvisioningMode" in obj, get: obj => obj.formProvisioningMode, set: (obj, value) => { obj.formProvisioningMode = value; } }, metadata: _metadata }, _formProvisioningMode_initializers, _formProvisioningMode_extraInitializers);
+            __esDecorate(this, null, _formDefaultRoles_decorators, { kind: "accessor", name: "formDefaultRoles", static: false, private: false, access: { has: obj => "formDefaultRoles" in obj, get: obj => obj.formDefaultRoles, set: (obj, value) => { obj.formDefaultRoles = value; } }, metadata: _metadata }, _formDefaultRoles_initializers, _formDefaultRoles_extraInitializers);
+            __esDecorate(this, null, _formGroupMappings_decorators, { kind: "accessor", name: "formGroupMappings", static: false, private: false, access: { has: obj => "formGroupMappings" in obj, get: obj => obj.formGroupMappings, set: (obj, value) => { obj.formGroupMappings = value; } }, metadata: _metadata }, _formGroupMappings_initializers, _formGroupMappings_extraInitializers);
+            __esDecorate(this, null, _formError_decorators, { kind: "accessor", name: "formError", static: false, private: false, access: { has: obj => "formError" in obj, get: obj => obj.formError, set: (obj, value) => { obj.formError = value; } }, metadata: _metadata }, _formError_initializers, _formError_extraInitializers);
+            __esDecorate(null, _classDescriptor = { value: _classThis }, _classDecorators, { kind: "class", name: _classThis.name, metadata: _metadata }, null, _classExtraInitializers);
+            IdpSsoConnectionForm = _classThis = _classDescriptor.value;
+            if (_metadata) Object.defineProperty(_classThis, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
+        }
+        static demo = () => html `
+    <div style="max-width: 720px; display: flex; flex-direction: column; gap: 16px;">
+      <idp-sso-connection-form
+        .spDetails=${{
+            spEntityId: 'https://idp.global/saml/sp/metadata/conn-1',
+            acsUrl: 'https://idp.global/saml/acs/conn-1',
+            metadataUrl: 'https://idp.global/saml/sp/metadata/conn-1',
+            scimBaseUrl: 'https://idp.global/scim/v2',
+        }}
+        .connections=${[
+            {
+                id: 'conn-1',
+                displayName: 'Okta (acme.com)',
+                status: 'active',
+                emailDomains: ['acme.com', 'acme.io'],
+                entityId: 'http://www.okta.com/exk9examples',
+                ssoUrl: 'https://acme.okta.com/app/xyz/sso/saml',
+                certificateCount: 1,
+                provisioningMode: 'jit-and-scim',
+                defaultOrgRoles: ['member'],
+                groupMappings: [{ idpGroup: 'Engineering', orgRoles: ['developer'] }],
+            },
+        ]}
+      ></idp-sso-connection-form>
+    </div>
+  `;
+        static demoGroups = ['idp.global v5 admin console'];
+        #connections_accessor_storage = __runInitializers(this, _connections_initializers, []);
+        get connections() { return this.#connections_accessor_storage; }
+        set connections(value) { this.#connections_accessor_storage = value; }
+        #spDetails_accessor_storage = (__runInitializers(this, _connections_extraInitializers), __runInitializers(this, _spDetails_initializers, null));
+        get spDetails() { return this.#spDetails_accessor_storage; }
+        set spDetails(value) { this.#spDetails_accessor_storage = value; }
+        #formOpen_accessor_storage = (__runInitializers(this, _spDetails_extraInitializers), __runInitializers(this, _formOpen_initializers, false));
+        get formOpen() { return this.#formOpen_accessor_storage; }
+        set formOpen(value) { this.#formOpen_accessor_storage = value; }
+        #manualIdp_accessor_storage = (__runInitializers(this, _formOpen_extraInitializers), __runInitializers(this, _manualIdp_initializers, false));
+        get manualIdp() { return this.#manualIdp_accessor_storage; }
+        set manualIdp(value) { this.#manualIdp_accessor_storage = value; }
+        #formDisplayName_accessor_storage = (__runInitializers(this, _manualIdp_extraInitializers), __runInitializers(this, _formDisplayName_initializers, ''));
+        get formDisplayName() { return this.#formDisplayName_accessor_storage; }
+        set formDisplayName(value) { this.#formDisplayName_accessor_storage = value; }
+        #formEmailDomains_accessor_storage = (__runInitializers(this, _formDisplayName_extraInitializers), __runInitializers(this, _formEmailDomains_initializers, ''));
+        get formEmailDomains() { return this.#formEmailDomains_accessor_storage; }
+        set formEmailDomains(value) { this.#formEmailDomains_accessor_storage = value; }
+        #formMetadataXml_accessor_storage = (__runInitializers(this, _formEmailDomains_extraInitializers), __runInitializers(this, _formMetadataXml_initializers, ''));
+        get formMetadataXml() { return this.#formMetadataXml_accessor_storage; }
+        set formMetadataXml(value) { this.#formMetadataXml_accessor_storage = value; }
+        #formEntityId_accessor_storage = (__runInitializers(this, _formMetadataXml_extraInitializers), __runInitializers(this, _formEntityId_initializers, ''));
+        get formEntityId() { return this.#formEntityId_accessor_storage; }
+        set formEntityId(value) { this.#formEntityId_accessor_storage = value; }
+        #formSsoUrl_accessor_storage = (__runInitializers(this, _formEntityId_extraInitializers), __runInitializers(this, _formSsoUrl_initializers, ''));
+        get formSsoUrl() { return this.#formSsoUrl_accessor_storage; }
+        set formSsoUrl(value) { this.#formSsoUrl_accessor_storage = value; }
+        #formCertificate_accessor_storage = (__runInitializers(this, _formSsoUrl_extraInitializers), __runInitializers(this, _formCertificate_initializers, ''));
+        get formCertificate() { return this.#formCertificate_accessor_storage; }
+        set formCertificate(value) { this.#formCertificate_accessor_storage = value; }
+        #formProvisioningMode_accessor_storage = (__runInitializers(this, _formCertificate_extraInitializers), __runInitializers(this, _formProvisioningMode_initializers, 'jit'));
+        get formProvisioningMode() { return this.#formProvisioningMode_accessor_storage; }
+        set formProvisioningMode(value) { this.#formProvisioningMode_accessor_storage = value; }
+        #formDefaultRoles_accessor_storage = (__runInitializers(this, _formProvisioningMode_extraInitializers), __runInitializers(this, _formDefaultRoles_initializers, 'member'));
+        get formDefaultRoles() { return this.#formDefaultRoles_accessor_storage; }
+        set formDefaultRoles(value) { this.#formDefaultRoles_accessor_storage = value; }
+        #formGroupMappings_accessor_storage = (__runInitializers(this, _formDefaultRoles_extraInitializers), __runInitializers(this, _formGroupMappings_initializers, ''));
+        get formGroupMappings() { return this.#formGroupMappings_accessor_storage; }
+        set formGroupMappings(value) { this.#formGroupMappings_accessor_storage = value; }
+        #formError_accessor_storage = (__runInitializers(this, _formGroupMappings_extraInitializers), __runInitializers(this, _formError_initializers, ''));
+        get formError() { return this.#formError_accessor_storage; }
+        set formError(value) { this.#formError_accessor_storage = value; }
+        static styles = [
+            ...idpElementStyles,
+            css `
+      :host {
+        display: block;
+        font-family: var(--idp-font);
+        color: var(--idp-fg);
+      }
+      .section {
+        background: var(--idp-card);
+        border: 1px solid var(--idp-border);
+        border-radius: var(--idp-radius);
+        padding: 20px;
+      }
+      .headline {
+        display: flex;
+        align-items: flex-start;
+        justify-content: space-between;
+        gap: 16px;
+      }
+      .title {
+        font-size: 14px;
+        font-weight: 600;
+      }
+      .muted {
+        font-size: 12.5px;
+        color: var(--idp-muted-fg);
+        line-height: 1.5;
+        margin-top: 3px;
+      }
+      .sp-grid {
+        display: grid;
+        grid-template-columns: minmax(90px, auto) 1fr;
+        gap: 6px 14px;
+        margin-top: 14px;
+        padding: 12px;
+        background: var(--idp-muted);
+        border: 1px solid var(--idp-border);
+        border-radius: 10px;
+        font-size: 12px;
+      }
+      .sp-key {
+        color: var(--idp-muted-fg);
+        white-space: nowrap;
+      }
+      .sp-value {
+        font-family: var(--idp-mono, ui-monospace, monospace);
+        overflow-wrap: anywhere;
+      }
+      .row {
+        padding: 14px 0;
+        border-bottom: 1px solid var(--idp-border);
+      }
+      .row:last-of-type {
+        border-bottom: none;
+      }
+      .row-head {
+        display: flex;
+        align-items: center;
+        gap: 10px;
+      }
+      .row-name {
+        font-size: 13px;
+        font-weight: 500;
+        flex: 1;
+        display: flex;
+        align-items: center;
+        gap: 8px;
+        min-width: 0;
+      }
+      .row-meta {
+        font-size: 11px;
+        color: var(--idp-muted-fg);
+        margin-top: 4px;
+        overflow-wrap: anywhere;
+      }
+      .chip-row {
+        display: flex;
+        flex-wrap: wrap;
+        gap: 6px;
+        margin-top: 8px;
+      }
+      .row-actions {
+        display: flex;
+        gap: 6px;
+        flex: 0 0 auto;
+      }
+      .table-action {
+        background: none;
+        border: 1px solid var(--idp-border);
+        border-radius: 7px;
+        cursor: pointer;
+        font-family: inherit;
+        font-size: 11px;
+        font-weight: 500;
+        padding: 4px 10px;
+        color: var(--idp-fg);
+      }
+      .table-action:hover {
+        background: var(--idp-muted);
+      }
+      .table-action.destructive {
+        color: var(--idp-destructive);
+        border-color: transparent;
+      }
+      .table-action.destructive:hover {
+        background: var(--idp-error-bg);
+      }
+      .empty {
+        padding: 18px 0;
+        font-size: 12.5px;
+        color: var(--idp-muted-fg);
+      }
+      .form {
+        margin-top: 16px;
+        padding-top: 16px;
+        border-top: 1px solid var(--idp-border);
+        display: flex;
+        flex-direction: column;
+        gap: 12px;
+      }
+      .form-grid {
+        display: grid;
+        grid-template-columns: 1fr 1fr;
+        gap: 12px;
+      }
+      @media (max-width: 720px) {
+        .form-grid {
+          grid-template-columns: 1fr;
+        }
+      }
+      label.field {
+        display: flex;
+        flex-direction: column;
+        gap: 5px;
+        font-size: 12px;
+        font-weight: 500;
+      }
+      textarea,
+      select {
+        font-family: inherit;
+        font-size: 12.5px;
+        color: var(--idp-fg);
+        background: var(--idp-card);
+        border: 1px solid var(--idp-border);
+        border-radius: 8px;
+        padding: 8px 10px;
+      }
+      textarea {
+        font-family: var(--idp-mono, ui-monospace, monospace);
+        min-height: 96px;
+        resize: vertical;
+      }
+      textarea:focus-visible,
+      select:focus-visible {
+        outline: 2px solid color-mix(in srgb, var(--idp-accent), transparent 68%);
+        outline-offset: 1px;
+      }
+      .hint {
+        font-size: 11px;
+        font-weight: 400;
+        color: var(--idp-muted-fg);
+      }
+      .toggle-link {
+        background: none;
+        border: none;
+        padding: 0;
+        cursor: pointer;
+        font-family: inherit;
+        font-size: 11.5px;
+        color: var(--idp-accent);
+        text-align: left;
+      }
+      .error {
+        font-size: 12px;
+        color: var(--idp-destructive);
+      }
+      .form-actions {
+        display: flex;
+        gap: 8px;
+        justify-content: flex-end;
+      }
+    `,
+        ];
+        parseGroupMappings(rawArg) {
+            return rawArg
+                .split('\n')
+                .map((lineArg) => lineArg.trim())
+                .filter(Boolean)
+                .map((lineArg) => {
+                const [groupPart, rolesPart] = lineArg.split('=');
+                return {
+                    idpGroup: (groupPart || '').trim(),
+                    orgRoles: (rolesPart || '')
+                        .split(',')
+                        .map((roleArg) => roleArg.trim())
+                        .filter(Boolean),
+                };
+            })
+                .filter((mappingArg) => mappingArg.idpGroup && mappingArg.orgRoles.length > 0);
+        }
+        parseList(rawArg) {
+            return rawArg
+                .split(',')
+                .map((entryArg) => entryArg.trim())
+                .filter(Boolean);
+        }
+        submitCreate() {
+            this.formError = '';
+            const displayName = this.formDisplayName.trim();
+            const emailDomains = this.parseList(this.formEmailDomains).map((domainArg) => domainArg.toLowerCase());
+            if (!displayName || emailDomains.length === 0) {
+                this.formError = 'Display name and at least one email domain are required.';
+                return;
+            }
+            const detail = {
+                displayName,
+                emailDomains,
+                provisioningMode: this.formProvisioningMode,
+                defaultOrgRoles: this.parseList(this.formDefaultRoles),
+                groupMappings: this.parseGroupMappings(this.formGroupMappings),
+            };
+            if (this.manualIdp) {
+                const entityId = this.formEntityId.trim();
+                const ssoUrl = this.formSsoUrl.trim();
+                const certificate = this.formCertificate.trim();
+                if (!entityId || !ssoUrl || !certificate) {
+                    this.formError = 'Entity ID, SSO URL and a signing certificate are required for manual setup.';
+                    return;
+                }
+                detail.idp = { entityId, ssoUrl, signingCertificates: [certificate] };
+            }
+            else {
+                const metadataXml = this.formMetadataXml.trim();
+                if (!metadataXml) {
+                    this.formError = 'Paste the IdP metadata XML or switch to manual setup.';
+                    return;
+                }
+                detail.metadataXml = metadataXml;
+            }
+            this.dispatchEvent(new CustomEvent('idp-sso-create', {
+                detail,
+                bubbles: true,
+                composed: true,
+            }));
+            this.resetForm();
+        }
+        resetForm() {
+            this.formOpen = false;
+            this.manualIdp = false;
+            this.formDisplayName = '';
+            this.formEmailDomains = '';
+            this.formMetadataXml = '';
+            this.formEntityId = '';
+            this.formSsoUrl = '';
+            this.formCertificate = '';
+            this.formProvisioningMode = 'jit';
+            this.formDefaultRoles = 'member';
+            this.formGroupMappings = '';
+            this.formError = '';
+        }
+        readInput(eventArg) {
+            const target = eventArg.composedPath()[0];
+            return target?.value ?? '';
+        }
+        renderConnectionRow(connectionArg) {
+            return html `
+      <div class="row">
+        <div class="row-head">
+          <div class="row-name">
+            ${connectionArg.displayName}
+            <idp-badge variant=${connectionArg.status === 'active' ? 'ok' : 'outline'}>${connectionArg.status}</idp-badge>
+            <idp-badge variant="outline">${connectionArg.provisioningMode}</idp-badge>
+          </div>
+          <div class="row-actions">
+            <button
+              class="table-action"
+              @click=${() => this.dispatchEvent(new CustomEvent('idp-sso-status', {
+                detail: {
+                    connectionId: connectionArg.id,
+                    status: connectionArg.status === 'active' ? 'disabled' : 'active',
+                },
+                bubbles: true,
+                composed: true,
+            }))}
+            >
+              ${connectionArg.status === 'active' ? 'Disable' : 'Enable'}
+            </button>
+            <button
+              class="table-action destructive"
+              @click=${() => this.dispatchEvent(new CustomEvent('idp-sso-delete', {
+                detail: { connectionId: connectionArg.id },
+                bubbles: true,
+                composed: true,
+            }))}
+            >
+              Delete
+            </button>
+          </div>
+        </div>
+        <div class="row-meta">${connectionArg.entityId} · ${connectionArg.ssoUrl} · ${connectionArg.certificateCount} cert${connectionArg.certificateCount === 1 ? '' : 's'}</div>
+        <div class="chip-row">
+          ${connectionArg.emailDomains.map((domainArg) => html `<idp-badge variant="accent">@${domainArg}</idp-badge>`)}
+          ${connectionArg.groupMappings.map((mappingArg) => html `<idp-badge variant="outline">${mappingArg.idpGroup} → ${mappingArg.orgRoles.join(', ')}</idp-badge>`)}
+        </div>
+      </div>
+    `;
+        }
+        renderForm() {
+            return html `
+      <div class="form">
+        <div class="form-grid">
+          <idp-input
+            label="Display name"
+            placeholder="e.g. Okta (acme.com)"
+            .value=${this.formDisplayName}
+            @input=${(eventArg) => (this.formDisplayName = this.readInput(eventArg))}
+          ></idp-input>
+          <idp-input
+            label="Email domains (comma-separated)"
+            placeholder="acme.com, acme.io"
+            .value=${this.formEmailDomains}
+            @input=${(eventArg) => (this.formEmailDomains = this.readInput(eventArg))}
+          ></idp-input>
+        </div>
+        ${this.manualIdp
+                ? html `
+              <div class="form-grid">
+                <idp-input
+                  label="IdP entity ID"
+                  placeholder="http://www.okta.com/exk..."
+                  .value=${this.formEntityId}
+                  @input=${(eventArg) => (this.formEntityId = this.readInput(eventArg))}
+                ></idp-input>
+                <idp-input
+                  label="IdP SSO URL"
+                  placeholder="https://acme.okta.com/app/.../sso/saml"
+                  .value=${this.formSsoUrl}
+                  @input=${(eventArg) => (this.formSsoUrl = this.readInput(eventArg))}
+                ></idp-input>
+              </div>
+              <label class="field">
+                IdP signing certificate (PEM)
+                <textarea
+                  placeholder="-----BEGIN CERTIFICATE-----"
+                  .value=${this.formCertificate}
+                  @input=${(eventArg) => (this.formCertificate = this.readInput(eventArg))}
+                ></textarea>
+              </label>
+            `
+                : html `
+              <label class="field">
+                IdP metadata XML
+                <span class="hint">Download it from your IdP (Okta: Sign On → SAML metadata; Entra: Federation metadata XML)</span>
+                <textarea
+                  placeholder="<EntityDescriptor ...>"
+                  .value=${this.formMetadataXml}
+                  @input=${(eventArg) => (this.formMetadataXml = this.readInput(eventArg))}
+                ></textarea>
+              </label>
+            `}
+        <button class="toggle-link" @click=${() => (this.manualIdp = !this.manualIdp)}>
+          ${this.manualIdp ? 'Use metadata XML instead' : 'Enter entity ID, SSO URL and certificate manually'}
+        </button>
+        <div class="form-grid">
+          <label class="field">
+            Provisioning
+            <select
+              .value=${this.formProvisioningMode}
+              @change=${(eventArg) => (this.formProvisioningMode = this.readInput(eventArg))}
+            >
+              <option value="jit">Just-in-time (create accounts on first login)</option>
+              <option value="scim-only">SCIM only (require provisioning before login)</option>
+              <option value="jit-and-scim">JIT + SCIM</option>
+            </select>
+          </label>
+          <idp-input
+            label="Default org roles (comma-separated)"
+            placeholder="member"
+            .value=${this.formDefaultRoles}
+            @input=${(eventArg) => (this.formDefaultRoles = this.readInput(eventArg))}
+          ></idp-input>
+        </div>
+        <label class="field">
+          Group → role mappings
+          <span class="hint">One per line: IdP group = role1, role2</span>
+          <textarea
+            style="min-height: 64px"
+            placeholder="Engineering = developer"
+            .value=${this.formGroupMappings}
+            @input=${(eventArg) => (this.formGroupMappings = this.readInput(eventArg))}
+          ></textarea>
+        </label>
+        ${this.formError ? html `<div class="error">${this.formError}</div>` : html ``}
+        <div class="form-actions">
+          <idp-button variant="ghost" size="sm" @click=${() => this.resetForm()}>Cancel</idp-button>
+          <idp-button variant="accent" size="sm" @click=${() => this.submitCreate()}>Create connection</idp-button>
+        </div>
+      </div>
+    `;
+        }
+        render() {
+            return html `
+      <div class="section">
+        <div class="headline">
+          <div>
+            <div class="title">SAML single sign-on</div>
+            <div class="muted">
+              Let members sign in through your organisation's identity provider. Users entering a
+              matching email domain are routed to your IdP automatically.
+            </div>
+          </div>
+          ${!this.formOpen
+                ? html `<idp-button variant="accent" size="sm" @click=${() => (this.formOpen = true)}>Add connection</idp-button>`
+                : html ``}
+        </div>
+        ${this.spDetails
+                ? html `
+              <div class="sp-grid">
+                <span class="sp-key">SP entity ID</span><span class="sp-value">${this.spDetails.spEntityId}</span>
+                <span class="sp-key">ACS URL</span><span class="sp-value">${this.spDetails.acsUrl}</span>
+                <span class="sp-key">SP metadata</span><span class="sp-value">${this.spDetails.metadataUrl}</span>
+              </div>
+            `
+                : html ``}
+        ${this.connections.length
+                ? this.connections.map((connectionArg) => this.renderConnectionRow(connectionArg))
+                : html `<div class="empty">No SSO connections yet.</div>`}
+        ${this.formOpen ? this.renderForm() : html ``}
+      </div>
+    `;
+        }
+        constructor() {
+            super(...arguments);
+            __runInitializers(this, _formError_extraInitializers);
+        }
+        static {
+            __runInitializers(_classThis, _classExtraInitializers);
+        }
+    };
+    return IdpSsoConnectionForm = _classThis;
+})();
+export { IdpSsoConnectionForm };
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts_web/elements/index.d.ts

@@ -34,3 +34,5 @@ export * from './idp-admin-shell.js';
 export * from './idp-landing-hero.js';
 export * from './idp-landing-page.js';
 export * from './idp-mobile-showcase.js';
+export * from './idp-sso-connection-form.js';
+export * from './idp-scim-token-panel.js';