SAML Service Provider

SP Certificate: Loaded

IdP Metadata: NOT CONFIGURED — upload IdP metadata to activate SAML auth

Endpoints

/saml/metadata — SP Metadata XML (send this to DoPT)
POST /saml/acs — Assertion Consumer Service
/saml/slo — Single Logout
/health — Health Check
GET /api/validate-token?token=... — JWT Validation