RS: SAML SSO

[rrelledge]

No description provided.

[github-actions]

DOC-5858

[github-actions]

Staging links:
https://redis.io/docs/staging/DOC-5858/operate/rs/references/rest-api/objects/certificates/
https://redis.io/docs/staging/DOC-5858/operate/rs/references/rest-api/objects/sso/
https://redis.io/docs/staging/DOC-5858/operate/rs/references/rest-api/objects/user/
https://redis.io/docs/staging/DOC-5858/operate/rs/references/rest-api/permissions/
https://redis.io/docs/staging/DOC-5858/operate/rs/references/rest-api/requests/cluster/sso/
https://redis.io/docs/staging/DOC-5858/operate/rs/security/
https://redis.io/docs/staging/DOC-5858/operate/rs/security/access-control/create-users/
https://redis.io/docs/staging/DOC-5858/operate/rs/security/access-control/saml-sso
https://redis.io/docs/staging/DOC-5858/operate/rs/security/access-control/saml-sso/
https://redis.io/docs/staging/DOC-5858/operate/rs/security/certificates/

[yoavredis]

@rrelledge it looks good :)
Left some comments.
10x

[avalov-r]

@rrelledge
Could you also maybe document that it is possible to change the default SP address? This currently will not be possible through CM (@yoavredis correct me if wrong), but REST API supports this. This is crucial for K8 customers, as they most likely will need to change this.

Endpoint:
PUT /v1/cluster/sso
{
"service": {
"address": "http://something.com/"
}
}

Once this is changed, the metadata file and the SP login/logout URL and entity ID will change to reflect this new address, therefore this is a breaking change for existing SSO integrations.

[andy-stark-redis]

Language LGTM.

Minor suggestion (if you have time and think it would help) is that maybe you could add an interactive or hidden checklist for the pages where you have steps to follow? (Example of this is here: https://redis.io/docs/latest/integrate/redis-data-integration/data-pipelines/prepare-dbs/my-sql-mariadb/) The interactive version might be helpful to human users, but even if you use the hidden form of the checklist, it helps AI agents to understand the intention of the page. Purely optional, though - I'm not suggesting that it makes sense to have these everywhere :-)

[rrelledge]

@avalov-r

@rrelledge Could you also maybe document that it is possible to change the default SP address?

I added a new "Change SP address" section under "Update configuration": https://redis.io/docs/staging/DOC-5858/operate/rs/security/access-control/saml-sso/#change-sp-address. Does this seem okay?