feat: Add account-level SSO configuration

This implements Single Sign-On (SSO) functionality at the account level, allowing individual accounts to configure their own SSO settings.

Key changes:
- Added SSO configuration to account model with JSONB storage
- Implemented SSO settings UI in account settings panel
- Added feature flag to control SSO access (premium feature)
- Updated authentication flow to support account-level SSO
- Added proper validation and error handling

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

app/javascript/dashboard/i18n/locale/en/generalSettings.json

@@ -123,6 +123,50 @@
         "CUSTOM_EMAIL_DOMAIN_ENABLED": "You can receive emails in your custom domain now."
       }
     },
+    "SSO": {
+      "TITLE": "Single Sign-On",
+      "DESCRIPTION": "Configure SSO authentication for your organization",
+      "FORM": {
+        "ENABLE_SSO": {
+          "LABEL": "Enable SSO",
+          "HELP": "Allow users to log in using Single Sign-On"
+        },
+        "PROVIDER_NAME": {
+          "LABEL": "Provider Name",
+          "PLACEHOLDER": "e.g., 'Okta', 'Azure AD', 'Google Workspace'",
+          "ERROR": "Please enter a provider name"
+        },
+        "LOGIN_URL": {
+          "LABEL": "SSO Login URL",
+          "PLACEHOLDER": "https://your-sso-provider.com/login",
+          "ERROR": "Please enter a valid SSO login URL",
+          "HELP": "Users will be redirected to this URL for authentication"
+        },
+        "LOGOUT_URL": {
+          "LABEL": "SSO Logout URL (Optional)",
+          "PLACEHOLDER": "https://your-sso-provider.com/logout",
+          "HELP": "Users will be redirected to this URL after logout"
+        },
+        "SECRET_KEY": {
+          "LABEL": "Secret Key",
+          "PLACEHOLDER": "Enter your SSO secret key",
+          "ERROR": "Please enter a secret key",
+          "HELP": "Secret key used to verify SSO tokens"
+        },
+        "TOKEN_EXPIRY": {
+          "LABEL": "Token Expiry (minutes)",
+          "PLACEHOLDER": "5",
+          "ERROR": "Please enter a valid expiry time",
+          "HELP": "How long SSO tokens remain valid"
+        },
+        "ERROR": "Please fix the form errors"
+      },
+      "SUBMIT": "Update SSO Settings",
+      "UPDATE": {
+        "SUCCESS": "SSO settings updated successfully",
+        "ERROR": "Failed to update SSO settings"
+      }
+    },
     "UPDATE_CHATWOOT": "An update {latestChatwootVersion} for Chatwoot is available. Please update your instance.",
     "LEARN_MORE": "Learn more",
     "PAYMENT_PENDING": "Your payment is pending. Please update your payment information to continue using Chatwoot",

app/javascript/dashboard/i18n/locale/en/login.json

@@ -20,6 +20,9 @@
       "BUSINESS_ACCOUNTS_ONLY": "Please use your company email address to login",
       "NO_ACCOUNT_FOUND": "We couldn't find an account for your email address."
     },
+    "SSO": {
+      "BUTTON_TEXT": "Login with {provider}"
+    },
     "FORGOT_PASSWORD": "Forgot your password?",
     "CREATE_NEW_ACCOUNT": "Create a new account",
     "SUBMIT": "Login"