@open-mercato/enterprise 0.4.6-develop-15c18897fc → 0.4.6-develop-34aa847ce6

package/dist/modules/sso/events.js

@@ -0,0 +1,24 @@
+import { createModuleEvents } from "@open-mercato/shared/modules/events";
+const events = [
+  { id: "sso.login.initiated", label: "SSO Login Initiated", category: "lifecycle" },
+  { id: "sso.login.completed", label: "SSO Login Completed", category: "lifecycle" },
+  { id: "sso.login.failed", label: "SSO Login Failed", category: "lifecycle" },
+  { id: "sso.identity.linked", label: "SSO Identity Linked", category: "lifecycle" },
+  { id: "sso.identity.created", label: "SSO Identity Created (JIT)", category: "lifecycle" },
+  { id: "sso.config.created", label: "SSO Config Created", entity: "sso_config", category: "crud" },
+  { id: "sso.config.updated", label: "SSO Config Updated", entity: "sso_config", category: "crud" },
+  { id: "sso.config.deleted", label: "SSO Config Deleted", entity: "sso_config", category: "crud" },
+  { id: "sso.config.activated", label: "SSO Config Activated", entity: "sso_config", category: "lifecycle" },
+  { id: "sso.config.deactivated", label: "SSO Config Deactivated", entity: "sso_config", category: "lifecycle" },
+  { id: "sso.domain.added", label: "SSO Domain Added", entity: "sso_config", category: "lifecycle" },
+  { id: "sso.domain.removed", label: "SSO Domain Removed", entity: "sso_config", category: "lifecycle" }
+];
+const eventsConfig = createModuleEvents({ moduleId: "sso", events });
+const emitSsoEvent = eventsConfig.emit;
+var events_default = eventsConfig;
+export {
+  events_default as default,
+  emitSsoEvent,
+  eventsConfig
+};
+//# sourceMappingURL=events.js.map

package/dist/modules/sso/events.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/sso/events.ts"],
+  "sourcesContent": ["import { createModuleEvents } from '@open-mercato/shared/modules/events'\n\nconst events = [\n  { id: 'sso.login.initiated', label: 'SSO Login Initiated', category: 'lifecycle' },\n  { id: 'sso.login.completed', label: 'SSO Login Completed', category: 'lifecycle' },\n  { id: 'sso.login.failed', label: 'SSO Login Failed', category: 'lifecycle' },\n  { id: 'sso.identity.linked', label: 'SSO Identity Linked', category: 'lifecycle' },\n  { id: 'sso.identity.created', label: 'SSO Identity Created (JIT)', category: 'lifecycle' },\n  { id: 'sso.config.created', label: 'SSO Config Created', entity: 'sso_config', category: 'crud' },\n  { id: 'sso.config.updated', label: 'SSO Config Updated', entity: 'sso_config', category: 'crud' },\n  { id: 'sso.config.deleted', label: 'SSO Config Deleted', entity: 'sso_config', category: 'crud' },\n  { id: 'sso.config.activated', label: 'SSO Config Activated', entity: 'sso_config', category: 'lifecycle' },\n  { id: 'sso.config.deactivated', label: 'SSO Config Deactivated', entity: 'sso_config', category: 'lifecycle' },\n  { id: 'sso.domain.added', label: 'SSO Domain Added', entity: 'sso_config', category: 'lifecycle' },\n  { id: 'sso.domain.removed', label: 'SSO Domain Removed', entity: 'sso_config', category: 'lifecycle' },\n] as const\n\nexport const eventsConfig = createModuleEvents({ moduleId: 'sso', events })\nexport const emitSsoEvent = eventsConfig.emit\nexport type SsoEventId = typeof events[number]['id']\nexport default eventsConfig\n"],
+  "mappings": "AAAA,SAAS,0BAA0B;AAEnC,MAAM,SAAS;AAAA,EACb,EAAE,IAAI,uBAAuB,OAAO,uBAAuB,UAAU,YAAY;AAAA,EACjF,EAAE,IAAI,uBAAuB,OAAO,uBAAuB,UAAU,YAAY;AAAA,EACjF,EAAE,IAAI,oBAAoB,OAAO,oBAAoB,UAAU,YAAY;AAAA,EAC3E,EAAE,IAAI,uBAAuB,OAAO,uBAAuB,UAAU,YAAY;AAAA,EACjF,EAAE,IAAI,wBAAwB,OAAO,8BAA8B,UAAU,YAAY;AAAA,EACzF,EAAE,IAAI,sBAAsB,OAAO,sBAAsB,QAAQ,cAAc,UAAU,OAAO;AAAA,EAChG,EAAE,IAAI,sBAAsB,OAAO,sBAAsB,QAAQ,cAAc,UAAU,OAAO;AAAA,EAChG,EAAE,IAAI,sBAAsB,OAAO,sBAAsB,QAAQ,cAAc,UAAU,OAAO;AAAA,EAChG,EAAE,IAAI,wBAAwB,OAAO,wBAAwB,QAAQ,cAAc,UAAU,YAAY;AAAA,EACzG,EAAE,IAAI,0BAA0B,OAAO,0BAA0B,QAAQ,cAAc,UAAU,YAAY;AAAA,EAC7G,EAAE,IAAI,oBAAoB,OAAO,oBAAoB,QAAQ,cAAc,UAAU,YAAY;AAAA,EACjG,EAAE,IAAI,sBAAsB,OAAO,sBAAsB,QAAQ,cAAc,UAAU,YAAY;AACvG;AAEO,MAAM,eAAe,mBAAmB,EAAE,UAAU,OAAO,OAAO,CAAC;AACnE,MAAM,eAAe,aAAa;AAEzC,IAAO,iBAAQ;",
+  "names": []
+}

package/dist/modules/sso/i18n/de.json

@@ -0,0 +1,146 @@
+{
+  "common.activating": "Wird aktiviert...",
+  "common.add": "Hinzufügen",
+  "common.back": "Zurück",
+  "common.cancel": "Abbrechen",
+  "common.copied": "In die Zwischenablage kopiert",
+  "common.copy": "Kopieren",
+  "common.create": "Erstellen",
+  "common.creating": "Wird erstellt...",
+  "common.delete": "Löschen",
+  "common.disabled": "Deaktiviert",
+  "common.dismiss": "Verwerfen",
+  "common.edit": "Bearbeiten",
+  "common.enabled": "Aktiviert",
+  "common.loading": "Wird geladen...",
+  "common.next": "Weiter",
+  "common.notFound": "Nicht gefunden",
+  "common.remove": "Entfernen",
+  "common.save": "Speichern",
+  "common.saving": "Wird gespeichert...",
+  "settings.sections.auth": "Authentifizierung",
+  "sso.admin.action.activate": "Aktivieren",
+  "sso.admin.action.deactivate": "Deaktivieren",
+  "sso.admin.action.test": "Erkennung überprüfen",
+  "sso.admin.activated": "SSO-Konfiguration aktiviert",
+  "sso.admin.activity.empty": "Noch keine SSO-Anmeldeaktivität. Aktivitäten werden hier angezeigt, sobald Benutzer sich über SSO anmelden.",
+  "sso.admin.banner.activateNow": "Jetzt aktivieren",
+  "sso.admin.banner.created": "Ihre SSO-Konfiguration wurde erstellt. Möchten Sie sie jetzt aktivieren?",
+  "sso.admin.banner.notYet": "Noch nicht",
+  "sso.admin.column.created": "Erstellt",
+  "sso.admin.column.domains": "Domains",
+  "sso.admin.column.name": "Name",
+  "sso.admin.column.protocol": "Protokoll",
+  "sso.admin.column.status": "Status",
+  "sso.admin.create.title": "SSO konfigurieren",
+  "sso.admin.created": "SSO-Konfiguration erstellt",
+  "sso.admin.deactivated": "SSO-Konfiguration deaktiviert",
+  "sso.admin.delete.confirm": "Sind Sie sicher? Die SSO-Konfiguration wird entfernt. Benutzer mit verknüpften SSO-Identitäten müssen die Passwort-Anmeldung verwenden.",
+  "sso.admin.delete.success": "SSO-Konfiguration gelöscht",
+  "sso.admin.delete.title": "SSO-Konfiguration löschen",
+  "sso.admin.detail.backToList": "Zurück zu SSO",
+  "sso.admin.detail.title": "SSO-Konfiguration",
+  "sso.admin.domains.empty": "Keine Domains konfiguriert. Fügen Sie mindestens eine Domain hinzu, bevor Sie SSO aktivieren.",
+  "sso.admin.empty.cta": "SSO konfigurieren",
+  "sso.admin.empty.description": "Konfigurieren Sie Single Sign-On, damit sich Ihre Benutzer mit Ihrem Identitätsanbieter authentifizieren können.",
+  "sso.admin.empty.title": "Kein SSO konfiguriert",
+  "sso.admin.error.activationFailed": "Aktivierungsstatus konnte nicht aktualisiert werden",
+  "sso.admin.error.alreadyExists": "Für diese Organisation existiert bereits eine SSO-Konfiguration",
+  "sso.admin.error.createFailed": "SSO-Konfiguration konnte nicht erstellt werden",
+  "sso.admin.error.deleteActive": "Eine aktive SSO-Konfiguration kann nicht gelöscht werden — deaktivieren Sie sie zuerst",
+  "sso.admin.error.deleteFailed": "SSO-Konfiguration konnte nicht gelöscht werden",
+  "sso.admin.error.domainAddFailed": "Domain konnte nicht hinzugefügt werden",
+  "sso.admin.error.domainRemoveFailed": "Domain konnte nicht entfernt werden",
+  "sso.admin.error.loadFailed": "SSO-Konfiguration konnte nicht geladen werden",
+  "sso.admin.error.noDomainsForActivation": "Fügen Sie mindestens eine erlaubte E-Mail-Domain hinzu, bevor Sie aktivieren",
+  "sso.admin.error.saveFailed": "SSO-Konfiguration konnte nicht gespeichert werden",
+  "sso.admin.error.testFailed": "Verbindungstest fehlgeschlagen",
+  "sso.admin.field.autoLinkByEmail": "Automatische Verknüpfung per E-Mail",
+  "sso.admin.field.autoLinkByEmailDesc": "Bestehende Benutzer automatisch über übereinstimmende E-Mail-Adresse verknüpfen",
+  "sso.admin.field.changeSecret": "Ändern",
+  "sso.admin.field.clientId": "Client-ID",
+  "sso.admin.field.clientSecret": "Client-Geheimnis",
+  "sso.admin.field.issuer": "Aussteller-URL",
+  "sso.admin.field.jitDisabledByScim": "Nicht verfügbar — SCIM-Verzeichnissynchronisierung ist aktiv. Widerrufen Sie SCIM-Token, um JIT zu aktivieren.",
+  "sso.admin.field.jitEnabled": "Just-in-Time-Bereitstellung",
+  "sso.admin.field.jitEnabledDesc": "Benutzerkonten automatisch bei der ersten SSO-Anmeldung erstellen",
+  "sso.admin.field.name": "Konfigurationsname",
+  "sso.admin.field.protocol": "Protokoll",
+  "sso.admin.field.secretPlaceholder": "Neues Geheimnis eingeben, um das bestehende zu ersetzen",
+  "sso.admin.field.secretRequired": "Client-Geheimnis eingeben",
+  "sso.admin.field.secretSet": "Client-Geheimnis ist konfiguriert",
+  "sso.admin.new": "Neue SSO-Konfiguration",
+  "sso.admin.roles.description": "Ordnen Sie IdP-App-Rollennamen lokalen Rollen zu. Bei jeder SSO-Anmeldung werden SSO-basierte Rollen synchronisiert — Rollen, die der IdP nicht mehr sendet, werden entfernt, während manuell zugewiesene Rollen erhalten bleiben.",
+  "sso.admin.roles.empty": "Keine Rollenzuordnungen konfiguriert. IdP-Rollennamen werden direkt mit lokalen Rollennamen abgeglichen.",
+  "sso.admin.roles.error.duplicate": "Diese IdP-Rolle ist bereits zugeordnet",
+  "sso.admin.roles.error.emptyIdpRole": "IdP-Rollenname ist erforderlich",
+  "sso.admin.roles.error.emptyLocalRole": "Wählen Sie eine lokale Rolle",
+  "sso.admin.roles.error.saveFailed": "Rollenzuordnungen konnten nicht gespeichert werden",
+  "sso.admin.roles.idpRole": "IdP-Rollenname",
+  "sso.admin.roles.idpRolePlaceholder": "z.B. OpenMercato.Admin",
+  "sso.admin.roles.localRole": "Lokale Rolle",
+  "sso.admin.roles.saved": "Rollenzuordnungen gespeichert",
+  "sso.admin.saved": "SSO-Konfiguration gespeichert",
+  "sso.admin.scim.endpointCopied": "SCIM-Endpunkt-URL kopiert",
+  "sso.admin.scim.endpointUrl": "SCIM-Endpunkt-URL",
+  "sso.admin.scim.error.createFailed": "SCIM-Token konnte nicht erstellt werden",
+  "sso.admin.scim.error.revokeFailed": "Token konnte nicht widerrufen werden",
+  "sso.admin.scim.generateToken": "Token generieren",
+  "sso.admin.scim.googleNotSupported": "Google Workspace unterstützt keine SCIM-Bereitstellung. Benutzer werden beim ersten Anmelden per Just-In-Time (JIT) bereitgestellt.",
+  "sso.admin.scim.jitActiveWarning": "SCIM-Bereitstellung ist nicht verfügbar, solange JIT aktiviert ist. Deaktivieren Sie JIT im Tab Allgemein, um SCIM zu konfigurieren.",
+  "sso.admin.scim.log.error": "Fehler",
+  "sso.admin.scim.log.operation": "Vorgang",
+  "sso.admin.scim.log.resource": "Ressource",
+  "sso.admin.scim.log.status": "Status",
+  "sso.admin.scim.log.time": "Zeit",
+  "sso.admin.scim.noTokens": "SCIM-Bereitstellung ist nicht konfiguriert. Generieren Sie ein Bearer-Token, damit Ihr Identitätsanbieter Benutzer automatisch synchronisieren kann.",
+  "sso.admin.scim.recentActivity": "Letzte Bereitstellungsaktivität",
+  "sso.admin.scim.revoke.action": "Widerrufen",
+  "sso.admin.scim.revoke.confirm": "Sind Sie sicher? Dieses Token wird SCIM-Anfragen nicht mehr authentifizieren.",
+  "sso.admin.scim.revoke.title": "Token widerrufen",
+  "sso.admin.scim.revoked": "Token widerrufen",
+  "sso.admin.scim.tokenActive": "Aktiv",
+  "sso.admin.scim.tokenCopied": "Token in die Zwischenablage kopiert",
+  "sso.admin.scim.tokenCreated": "Ihr SCIM-Token wurde erstellt. Kopieren Sie es jetzt — es wird nicht erneut angezeigt.",
+  "sso.admin.scim.tokenNamePlaceholder": "Token-Name (z.B. Entra ID Produktion)",
+  "sso.admin.scim.tokenRevoked": "Widerrufen",
+  "sso.admin.scim.tokens": "Bearer-Token",
+  "sso.admin.search": "Nach Name oder Aussteller suchen...",
+  "sso.admin.section.allowedDomains": "Erlaubte Domains",
+  "sso.admin.section.oidcSettings": "OIDC-Einstellungen",
+  "sso.admin.status.active": "Aktiv",
+  "sso.admin.status.inactive": "Inaktiv",
+  "sso.admin.tab.activity": "Aktivität",
+  "sso.admin.tab.domains": "Domains",
+  "sso.admin.tab.general": "Allgemein",
+  "sso.admin.tab.roles": "Rollenzuordnung",
+  "sso.admin.tab.scim": "Bereitstellung",
+  "sso.admin.test.failed": "Erkennung fehlgeschlagen",
+  "sso.admin.test.success": "Erkennung erfolgreich — Aussteller ist erreichbar",
+  "sso.admin.title": "Single Sign-On",
+  "sso.admin.wizard.credentials.callbackUrl": "Weiterleitungs-URI (in Ihren IdP kopieren)",
+  "sso.admin.wizard.credentials.namePlaceholder": "z.B. Zitadel Produktion",
+  "sso.admin.wizard.credentials.title": "OIDC-Anmeldedaten",
+  "sso.admin.wizard.domain.duplicate": "Domain bereits hinzugefügt",
+  "sso.admin.wizard.domain.invalid": "Ungültiges Domain-Format",
+  "sso.admin.wizard.domain.limit": "Maximal 20 Domains pro Konfiguration",
+  "sso.admin.wizard.domains.description": "Benutzer mit E-Mail-Adressen, die diesen Domains entsprechen, werden zu Ihrem SSO-Anbieter weitergeleitet.",
+  "sso.admin.wizard.domains.placeholder": "beispiel.de",
+  "sso.admin.wizard.domains.title": "Erlaubte E-Mail-Domains",
+  "sso.admin.wizard.options.title": "Optionen",
+  "sso.admin.wizard.protocol.oidcDesc": "Funktioniert mit Zitadel, Microsoft Entra ID, Google Workspace, Okta und mehr",
+  "sso.admin.wizard.protocol.samlDesc": "Demnächst verfügbar",
+  "sso.admin.wizard.protocol.title": "Protokoll auswählen",
+  "sso.admin.wizard.review.note": "Die Konfiguration wird als inaktiv erstellt. Sie können sie von der Detailseite aus aktivieren, nachdem Sie alles überprüft haben.",
+  "sso.admin.wizard.review.save": "Konfiguration erstellen",
+  "sso.admin.wizard.review.testing": "Wird getestet...",
+  "sso.admin.wizard.review.title": "Überprüfen und speichern",
+  "sso.login.continueWithSso": "Mit SSO fortfahren",
+  "sso.login.errors.emailNotVerified": "Ihre E-Mail-Adresse ist vom Identitätsanbieter nicht verifiziert. Bitte verifizieren Sie Ihre E-Mail und versuchen Sie es erneut.",
+  "sso.login.errors.failed": "SSO-Anmeldung fehlgeschlagen. Bitte versuchen Sie es erneut.",
+  "sso.login.errors.idpError": "Der Identitätsanbieter hat einen Fehler zurückgegeben. Bitte versuchen Sie es erneut oder kontaktieren Sie Ihren Administrator.",
+  "sso.login.errors.missingConfig": "SSO ist für dieses Konto nicht konfiguriert.",
+  "sso.login.errors.missingParams": "Der SSO-Rückruf war unvollständig. Bitte versuchen Sie es erneut.",
+  "sso.login.errors.stateMissing": "Die SSO-Sitzung ist abgelaufen. Bitte versuchen Sie es erneut.",
+  "sso.login.ssoEnabled": "SSO ist für dieses Konto aktiviert"
+}

package/dist/modules/sso/i18n/en.json

@@ -0,0 +1,146 @@
+{
+  "common.activating": "Activating...",
+  "common.add": "Add",
+  "common.back": "Back",
+  "common.cancel": "Cancel",
+  "common.copied": "Copied to clipboard",
+  "common.copy": "Copy",
+  "common.create": "Create",
+  "common.creating": "Creating...",
+  "common.delete": "Delete",
+  "common.disabled": "Disabled",
+  "common.dismiss": "Dismiss",
+  "common.edit": "Edit",
+  "common.enabled": "Enabled",
+  "common.loading": "Loading...",
+  "common.next": "Next",
+  "common.notFound": "Not found",
+  "common.remove": "Remove",
+  "common.save": "Save",
+  "common.saving": "Saving...",
+  "settings.sections.auth": "Auth",
+  "sso.admin.action.activate": "Activate",
+  "sso.admin.action.deactivate": "Deactivate",
+  "sso.admin.action.test": "Verify Discovery",
+  "sso.admin.activated": "SSO configuration activated",
+  "sso.admin.activity.empty": "No SSO login activity yet. Activity will appear here once users start logging in via SSO.",
+  "sso.admin.banner.activateNow": "Activate Now",
+  "sso.admin.banner.created": "Your SSO configuration has been created. Would you like to activate it now?",
+  "sso.admin.banner.notYet": "Not Yet",
+  "sso.admin.column.created": "Created",
+  "sso.admin.column.domains": "Domains",
+  "sso.admin.column.name": "Name",
+  "sso.admin.column.protocol": "Protocol",
+  "sso.admin.column.status": "Status",
+  "sso.admin.create.title": "Configure SSO",
+  "sso.admin.created": "SSO configuration created",
+  "sso.admin.deactivated": "SSO configuration deactivated",
+  "sso.admin.delete.confirm": "Are you sure? This will remove the SSO configuration. Users with linked SSO identities will need to use password login.",
+  "sso.admin.delete.success": "SSO configuration deleted",
+  "sso.admin.delete.title": "Delete SSO Configuration",
+  "sso.admin.detail.backToList": "Back to SSO",
+  "sso.admin.detail.title": "SSO Configuration",
+  "sso.admin.domains.empty": "No domains configured. Add at least one domain before activating SSO.",
+  "sso.admin.empty.cta": "Configure SSO",
+  "sso.admin.empty.description": "Configure Single Sign-On to let your users authenticate with your identity provider.",
+  "sso.admin.empty.title": "No SSO configured",
+  "sso.admin.error.activationFailed": "Failed to update activation status",
+  "sso.admin.error.alreadyExists": "An SSO configuration already exists for this organization",
+  "sso.admin.error.createFailed": "Failed to create SSO configuration",
+  "sso.admin.error.deleteActive": "Cannot delete an active SSO configuration — deactivate it first",
+  "sso.admin.error.deleteFailed": "Failed to delete SSO configuration",
+  "sso.admin.error.domainAddFailed": "Failed to add domain",
+  "sso.admin.error.domainRemoveFailed": "Failed to remove domain",
+  "sso.admin.error.loadFailed": "Failed to load SSO configuration",
+  "sso.admin.error.noDomainsForActivation": "Add at least one allowed email domain before activating",
+  "sso.admin.error.saveFailed": "Failed to save SSO configuration",
+  "sso.admin.error.testFailed": "Connection test failed",
+  "sso.admin.field.autoLinkByEmail": "Auto-link by Email",
+  "sso.admin.field.autoLinkByEmailDesc": "Automatically link existing users by matching email address",
+  "sso.admin.field.changeSecret": "Change",
+  "sso.admin.field.clientId": "Client ID",
+  "sso.admin.field.clientSecret": "Client Secret",
+  "sso.admin.field.issuer": "Issuer URL",
+  "sso.admin.field.jitDisabledByScim": "Unavailable — SCIM directory sync is active. Revoke SCIM tokens to enable JIT.",
+  "sso.admin.field.jitEnabled": "Just-in-Time Provisioning",
+  "sso.admin.field.jitEnabledDesc": "Automatically create user accounts on first SSO login",
+  "sso.admin.field.name": "Configuration Name",
+  "sso.admin.field.protocol": "Protocol",
+  "sso.admin.field.secretPlaceholder": "Enter new secret to replace existing",
+  "sso.admin.field.secretRequired": "Enter client secret",
+  "sso.admin.field.secretSet": "Client secret is configured",
+  "sso.admin.new": "New SSO Config",
+  "sso.admin.roles.description": "Map IdP app role names to local roles. On each SSO login, SSO-sourced roles are synced — roles no longer sent by the IdP are removed, while manually-assigned roles are preserved.",
+  "sso.admin.roles.empty": "No role mappings configured. IdP role names will be matched directly against local role names.",
+  "sso.admin.roles.error.duplicate": "This IdP role is already mapped",
+  "sso.admin.roles.error.emptyIdpRole": "IdP role name is required",
+  "sso.admin.roles.error.emptyLocalRole": "Select a local role",
+  "sso.admin.roles.error.saveFailed": "Failed to save role mappings",
+  "sso.admin.roles.idpRole": "IdP Role Name",
+  "sso.admin.roles.idpRolePlaceholder": "e.g. OpenMercato.Admin",
+  "sso.admin.roles.localRole": "Local Role",
+  "sso.admin.roles.saved": "Role mappings saved",
+  "sso.admin.saved": "SSO configuration saved",
+  "sso.admin.scim.endpointCopied": "SCIM endpoint URL copied",
+  "sso.admin.scim.endpointUrl": "SCIM Endpoint URL",
+  "sso.admin.scim.error.createFailed": "Failed to create SCIM token",
+  "sso.admin.scim.error.revokeFailed": "Failed to revoke token",
+  "sso.admin.scim.generateToken": "Generate Token",
+  "sso.admin.scim.googleNotSupported": "Google Workspace does not support SCIM provisioning. Users are provisioned via Just-In-Time (JIT) on first login.",
+  "sso.admin.scim.jitActiveWarning": "SCIM provisioning is unavailable while JIT provisioning is enabled. Disable JIT in the General tab to configure SCIM.",
+  "sso.admin.scim.log.error": "Error",
+  "sso.admin.scim.log.operation": "Operation",
+  "sso.admin.scim.log.resource": "Resource",
+  "sso.admin.scim.log.status": "Status",
+  "sso.admin.scim.log.time": "Time",
+  "sso.admin.scim.noTokens": "SCIM provisioning is not configured. Generate a bearer token to enable your identity provider to sync users automatically.",
+  "sso.admin.scim.recentActivity": "Recent Provisioning Activity",
+  "sso.admin.scim.revoke.action": "Revoke",
+  "sso.admin.scim.revoke.confirm": "Are you sure? This token will no longer authenticate SCIM requests.",
+  "sso.admin.scim.revoke.title": "Revoke Token",
+  "sso.admin.scim.revoked": "Token revoked",
+  "sso.admin.scim.tokenActive": "Active",
+  "sso.admin.scim.tokenCopied": "Token copied to clipboard",
+  "sso.admin.scim.tokenCreated": "Your SCIM token has been created. Copy it now — it will not be shown again.",
+  "sso.admin.scim.tokenNamePlaceholder": "Token name (e.g., Entra ID Production)",
+  "sso.admin.scim.tokenRevoked": "Revoked",
+  "sso.admin.scim.tokens": "Bearer Tokens",
+  "sso.admin.search": "Search by name or issuer...",
+  "sso.admin.section.allowedDomains": "Allowed Domains",
+  "sso.admin.section.oidcSettings": "OIDC Settings",
+  "sso.admin.status.active": "Active",
+  "sso.admin.status.inactive": "Inactive",
+  "sso.admin.tab.activity": "Activity",
+  "sso.admin.tab.domains": "Domains",
+  "sso.admin.tab.general": "General",
+  "sso.admin.tab.roles": "Role Mappings",
+  "sso.admin.tab.scim": "Provisioning",
+  "sso.admin.test.failed": "Discovery failed",
+  "sso.admin.test.success": "Discovery successful — issuer is reachable",
+  "sso.admin.title": "Single Sign-On",
+  "sso.admin.wizard.credentials.callbackUrl": "Redirect URI (copy to your IdP)",
+  "sso.admin.wizard.credentials.namePlaceholder": "e.g., Zitadel Production",
+  "sso.admin.wizard.credentials.title": "OIDC Credentials",
+  "sso.admin.wizard.domain.duplicate": "Domain already added",
+  "sso.admin.wizard.domain.invalid": "Invalid domain format",
+  "sso.admin.wizard.domain.limit": "Maximum 20 domains per configuration",
+  "sso.admin.wizard.domains.description": "Users with email addresses matching these domains will be redirected to your SSO provider.",
+  "sso.admin.wizard.domains.placeholder": "example.com",
+  "sso.admin.wizard.domains.title": "Allowed Email Domains",
+  "sso.admin.wizard.options.title": "Options",
+  "sso.admin.wizard.protocol.oidcDesc": "Works with Zitadel, Microsoft Entra ID, Google Workspace, Okta, and more",
+  "sso.admin.wizard.protocol.samlDesc": "Coming soon",
+  "sso.admin.wizard.protocol.title": "Select Protocol",
+  "sso.admin.wizard.review.note": "The configuration will be created as inactive. You can activate it from the detail page after verifying everything is correct.",
+  "sso.admin.wizard.review.save": "Create Configuration",
+  "sso.admin.wizard.review.testing": "Testing...",
+  "sso.admin.wizard.review.title": "Review & Save",
+  "sso.login.continueWithSso": "Continue with SSO",
+  "sso.login.errors.emailNotVerified": "Your email address is not verified by the identity provider. Please verify your email and try again.",
+  "sso.login.errors.failed": "SSO login failed. Please try again.",
+  "sso.login.errors.idpError": "The identity provider returned an error. Please try again or contact your administrator.",
+  "sso.login.errors.missingConfig": "SSO is not configured for this account.",
+  "sso.login.errors.missingParams": "SSO callback was incomplete. Please try again.",
+  "sso.login.errors.stateMissing": "SSO session expired. Please try again.",
+  "sso.login.ssoEnabled": "SSO is enabled for this account"
+}

package/dist/modules/sso/i18n/es.json

@@ -0,0 +1,146 @@
+{
+  "common.activating": "Activando...",
+  "common.add": "Agregar",
+  "common.back": "Volver",
+  "common.cancel": "Cancelar",
+  "common.copied": "Copiado al portapapeles",
+  "common.copy": "Copiar",
+  "common.create": "Crear",
+  "common.creating": "Creando...",
+  "common.delete": "Eliminar",
+  "common.disabled": "Deshabilitado",
+  "common.dismiss": "Descartar",
+  "common.edit": "Editar",
+  "common.enabled": "Habilitado",
+  "common.loading": "Cargando...",
+  "common.next": "Siguiente",
+  "common.notFound": "No encontrado",
+  "common.remove": "Eliminar",
+  "common.save": "Guardar",
+  "common.saving": "Guardando...",
+  "settings.sections.auth": "Autenticación",
+  "sso.admin.action.activate": "Activar",
+  "sso.admin.action.deactivate": "Desactivar",
+  "sso.admin.action.test": "Verificar descubrimiento",
+  "sso.admin.activated": "Configuración SSO activada",
+  "sso.admin.activity.empty": "Aún no hay actividad de inicio de sesión SSO. La actividad aparecerá aquí cuando los usuarios comiencen a iniciar sesión a través de SSO.",
+  "sso.admin.banner.activateNow": "Activar ahora",
+  "sso.admin.banner.created": "Su configuración SSO ha sido creada. ¿Desea activarla ahora?",
+  "sso.admin.banner.notYet": "Aún no",
+  "sso.admin.column.created": "Creado",
+  "sso.admin.column.domains": "Dominios",
+  "sso.admin.column.name": "Nombre",
+  "sso.admin.column.protocol": "Protocolo",
+  "sso.admin.column.status": "Estado",
+  "sso.admin.create.title": "Configurar SSO",
+  "sso.admin.created": "Configuración SSO creada",
+  "sso.admin.deactivated": "Configuración SSO desactivada",
+  "sso.admin.delete.confirm": "¿Está seguro? Esto eliminará la configuración SSO. Los usuarios con identidades SSO vinculadas deberán usar inicio de sesión con contraseña.",
+  "sso.admin.delete.success": "Configuración SSO eliminada",
+  "sso.admin.delete.title": "Eliminar configuración SSO",
+  "sso.admin.detail.backToList": "Volver a SSO",
+  "sso.admin.detail.title": "Configuración SSO",
+  "sso.admin.domains.empty": "No hay dominios configurados. Agregue al menos un dominio antes de activar SSO.",
+  "sso.admin.empty.cta": "Configurar SSO",
+  "sso.admin.empty.description": "Configure el inicio de sesión único para permitir a sus usuarios autenticarse con su proveedor de identidad.",
+  "sso.admin.empty.title": "SSO no configurado",
+  "sso.admin.error.activationFailed": "Error al actualizar el estado de activación",
+  "sso.admin.error.alreadyExists": "Ya existe una configuración SSO para esta organización",
+  "sso.admin.error.createFailed": "Error al crear la configuración SSO",
+  "sso.admin.error.deleteActive": "No se puede eliminar una configuración SSO activa — desactívela primero",
+  "sso.admin.error.deleteFailed": "Error al eliminar la configuración SSO",
+  "sso.admin.error.domainAddFailed": "Error al agregar dominio",
+  "sso.admin.error.domainRemoveFailed": "Error al eliminar dominio",
+  "sso.admin.error.loadFailed": "Error al cargar la configuración SSO",
+  "sso.admin.error.noDomainsForActivation": "Agregue al menos un dominio de correo electrónico permitido antes de activar",
+  "sso.admin.error.saveFailed": "Error al guardar la configuración SSO",
+  "sso.admin.error.testFailed": "La prueba de conexión falló",
+  "sso.admin.field.autoLinkByEmail": "Vinculación automática por correo electrónico",
+  "sso.admin.field.autoLinkByEmailDesc": "Vincular automáticamente usuarios existentes por dirección de correo electrónico coincidente",
+  "sso.admin.field.changeSecret": "Cambiar",
+  "sso.admin.field.clientId": "ID de cliente",
+  "sso.admin.field.clientSecret": "Secreto de cliente",
+  "sso.admin.field.issuer": "URL del emisor",
+  "sso.admin.field.jitDisabledByScim": "No disponible — La sincronización de directorio SCIM está activa. Revoque los tokens SCIM para habilitar JIT.",
+  "sso.admin.field.jitEnabled": "Aprovisionamiento Just-in-Time",
+  "sso.admin.field.jitEnabledDesc": "Crear automáticamente cuentas de usuario en el primer inicio de sesión SSO",
+  "sso.admin.field.name": "Nombre de configuración",
+  "sso.admin.field.protocol": "Protocolo",
+  "sso.admin.field.secretPlaceholder": "Ingrese nuevo secreto para reemplazar el existente",
+  "sso.admin.field.secretRequired": "Ingrese el secreto de cliente",
+  "sso.admin.field.secretSet": "El secreto de cliente está configurado",
+  "sso.admin.new": "Nueva configuración SSO",
+  "sso.admin.roles.description": "Asigne nombres de roles de aplicación IdP a roles locales. En cada inicio de sesión SSO, los roles de origen SSO se sincronizan — los roles que el IdP ya no envía se eliminan, mientras que los roles asignados manualmente se conservan.",
+  "sso.admin.roles.empty": "No hay asignaciones de roles configuradas. Los nombres de roles del IdP se compararán directamente con los nombres de roles locales.",
+  "sso.admin.roles.error.duplicate": "Este rol de IdP ya está asignado",
+  "sso.admin.roles.error.emptyIdpRole": "El nombre del rol de IdP es obligatorio",
+  "sso.admin.roles.error.emptyLocalRole": "Seleccione un rol local",
+  "sso.admin.roles.error.saveFailed": "Error al guardar las asignaciones de roles",
+  "sso.admin.roles.idpRole": "Nombre del rol de IdP",
+  "sso.admin.roles.idpRolePlaceholder": "ej. OpenMercato.Admin",
+  "sso.admin.roles.localRole": "Rol local",
+  "sso.admin.roles.saved": "Asignaciones de roles guardadas",
+  "sso.admin.saved": "Configuración SSO guardada",
+  "sso.admin.scim.endpointCopied": "URL del endpoint SCIM copiada",
+  "sso.admin.scim.endpointUrl": "URL del endpoint SCIM",
+  "sso.admin.scim.error.createFailed": "Error al crear el token SCIM",
+  "sso.admin.scim.error.revokeFailed": "Error al revocar el token",
+  "sso.admin.scim.generateToken": "Generar token",
+  "sso.admin.scim.googleNotSupported": "Google Workspace no admite el aprovisionamiento SCIM. Los usuarios se aprovisionan mediante Just-In-Time (JIT) en el primer inicio de sesión.",
+  "sso.admin.scim.jitActiveWarning": "El aprovisionamiento SCIM no está disponible mientras JIT está habilitado. Deshabilite JIT en la pestaña General para configurar SCIM.",
+  "sso.admin.scim.log.error": "Error",
+  "sso.admin.scim.log.operation": "Operación",
+  "sso.admin.scim.log.resource": "Recurso",
+  "sso.admin.scim.log.status": "Estado",
+  "sso.admin.scim.log.time": "Hora",
+  "sso.admin.scim.noTokens": "El aprovisionamiento SCIM no está configurado. Genere un token bearer para permitir que su proveedor de identidad sincronice usuarios automáticamente.",
+  "sso.admin.scim.recentActivity": "Actividad de aprovisionamiento reciente",
+  "sso.admin.scim.revoke.action": "Revocar",
+  "sso.admin.scim.revoke.confirm": "¿Está seguro? Este token ya no autenticará solicitudes SCIM.",
+  "sso.admin.scim.revoke.title": "Revocar token",
+  "sso.admin.scim.revoked": "Token revocado",
+  "sso.admin.scim.tokenActive": "Activo",
+  "sso.admin.scim.tokenCopied": "Token copiado al portapapeles",
+  "sso.admin.scim.tokenCreated": "Su token SCIM ha sido creado. Cópielo ahora — no se mostrará de nuevo.",
+  "sso.admin.scim.tokenNamePlaceholder": "Nombre del token (ej., Entra ID Producción)",
+  "sso.admin.scim.tokenRevoked": "Revocado",
+  "sso.admin.scim.tokens": "Tokens bearer",
+  "sso.admin.search": "Buscar por nombre o emisor...",
+  "sso.admin.section.allowedDomains": "Dominios permitidos",
+  "sso.admin.section.oidcSettings": "Configuración OIDC",
+  "sso.admin.status.active": "Activo",
+  "sso.admin.status.inactive": "Inactivo",
+  "sso.admin.tab.activity": "Actividad",
+  "sso.admin.tab.domains": "Dominios",
+  "sso.admin.tab.general": "General",
+  "sso.admin.tab.roles": "Asignación de roles",
+  "sso.admin.tab.scim": "Aprovisionamiento",
+  "sso.admin.test.failed": "Descubrimiento fallido",
+  "sso.admin.test.success": "Descubrimiento exitoso — el emisor es accesible",
+  "sso.admin.title": "Inicio de sesión único",
+  "sso.admin.wizard.credentials.callbackUrl": "URI de redirección (copie a su IdP)",
+  "sso.admin.wizard.credentials.namePlaceholder": "ej., Zitadel Producción",
+  "sso.admin.wizard.credentials.title": "Credenciales OIDC",
+  "sso.admin.wizard.domain.duplicate": "Dominio ya agregado",
+  "sso.admin.wizard.domain.invalid": "Formato de dominio inválido",
+  "sso.admin.wizard.domain.limit": "Máximo 20 dominios por configuración",
+  "sso.admin.wizard.domains.description": "Los usuarios con direcciones de correo electrónico que coincidan con estos dominios serán redirigidos a su proveedor SSO.",
+  "sso.admin.wizard.domains.placeholder": "ejemplo.com",
+  "sso.admin.wizard.domains.title": "Dominios de correo electrónico permitidos",
+  "sso.admin.wizard.options.title": "Opciones",
+  "sso.admin.wizard.protocol.oidcDesc": "Funciona con Zitadel, Microsoft Entra ID, Google Workspace, Okta y más",
+  "sso.admin.wizard.protocol.samlDesc": "Próximamente",
+  "sso.admin.wizard.protocol.title": "Seleccionar protocolo",
+  "sso.admin.wizard.review.note": "La configuración se creará como inactiva. Puede activarla desde la página de detalle después de verificar que todo esté correcto.",
+  "sso.admin.wizard.review.save": "Crear configuración",
+  "sso.admin.wizard.review.testing": "Probando...",
+  "sso.admin.wizard.review.title": "Revisar y guardar",
+  "sso.login.continueWithSso": "Continuar con SSO",
+  "sso.login.errors.emailNotVerified": "Su dirección de correo electrónico no está verificada por el proveedor de identidad. Por favor verifique su correo electrónico e intente de nuevo.",
+  "sso.login.errors.failed": "El inicio de sesión SSO falló. Por favor intente de nuevo.",
+  "sso.login.errors.idpError": "El proveedor de identidad devolvió un error. Por favor intente de nuevo o contacte a su administrador.",
+  "sso.login.errors.missingConfig": "SSO no está configurado para esta cuenta.",
+  "sso.login.errors.missingParams": "La devolución de llamada SSO fue incompleta. Por favor intente de nuevo.",
+  "sso.login.errors.stateMissing": "La sesión SSO expiró. Por favor intente de nuevo.",
+  "sso.login.ssoEnabled": "SSO está habilitado para esta cuenta"
+}