Authentication and SSO

tbd

[REVIEW NEEDED — Authentication mechanisms, SSO integration options (SAML, OAuth, OIDC), MFA configuration, and session management policies not documented in sources.]