Identity Provider admin tooling on source.coop

[alukach]

Description

Build admin UI in source.coop for platform operators to manage the platform IdP registry, and for account owners to view available IdPs when configuring Roles.

Key Requirements

• Platform operator view:
  • List all registered platform IdPs
  • Add new platform IdPs (issuer URL, display name, well-known claims, audience hint)
  • Edit existing platform IdPs
  • Remove platform IdPs (with guard: cannot delete if referenced by active Roles)
• Account owner view:
  • Browse available platform IdPs when creating/editing Roles
  • View IdP details: issuer URL, well-known claims (used as hints for claim constraint configuration), audience hint
• Future-ready: Design should accommodate account-registered IdPs (allowing accounts to register Okta, Entra ID, Keycloak, etc.) when that feature is implemented

References

• ADR-004 — Platform IdPs, future account-registered IdPs