[ulziibay-kernel]

Summary

Enterprise customers going through vendor security reviews ask for a public page describing our SSO configuration, and we didn't have one. This adds one under the Enterprise nav group.

• New page info/sso.mdx — a high-level summary of what SSO on the Enterprise plan supports: per-org connections scoped to the customer's email domain (subdomains allowed), SAML 2.0 (Microsoft Entra ID, Okta Workforce, Google Workspace, any other SAML 2.0 provider) and OIDC (any compatible provider), SP- and IdP-initiated SAML flows, just-in-time account provisioning with automatic account linking, directory sync (Entra ID, Okta, Google Workspace, others) framed as available-on-request, and MFA (enforced by the IdP, TOTP available as a second factor on Kernel accounts). Setup is described as a short metadata exchange (reply URL + entity ID for SAML, federation metadata from the IdP; OIDC parameters as needed). Capabilities are described in our own words at a high level, without naming the identity vendor.
• docs.json — the page joins the Enterprise group (after the Enterprise overview).
• info/enterprise.mdx — one row in the "What else the Enterprise plan includes" table linking to the new page.

Deliberately not claimed

• No self-serve SSO enrollment (the capability exists upstream, but we don't expose it).
• No role/group mapping claims — the dashboard supports ACLs, not IdP-driven RBAC.

Verification

• No identity-vendor mentions or vendor-doc links anywhere on the page (grep-verified).
• docs.json parses as valid JSON; nav entry matches the sibling pages' pattern.
• PR preview renders both /info/sso and /info/enterprise (200s), and the enterprise page links to /info/sso in the plan table, sidebar, and next-page pagination.
• Could not run mintlify dev in this environment (preview server never finished starting); rendered checks were done against the PR preview deployment instead.

---

Note

Low Risk
Documentation-only changes with no product, auth, or runtime behavior impact.

Overview
Adds public Enterprise SSO documentation for security reviews and sales conversations.

A new info/sso page describes per-organization, domain-scoped dashboard sign-in via SAML 2.0 and OIDC, supported IdPs, JIT provisioning, optional directory sync (on request), MFA behavior, and a metadata-exchange onboarding flow that routes to contact sales. The Enterprise nav in docs.json lists the page after the overview, and info/enterprise.mdx gains a plan-comparison table row linking to it.

^{Reviewed by Cursor Bugbot for commit 07150ca. Bugbot is set up for automated code reviews on this repo. Configure here.}

[mintlify]

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated
Kernel	🟢 Ready	View Preview	Oct 26, 2026, 4:31 PM

💡 Tip: Enable Automations to automatically generate PRs for you.