fix(sso): removed provider specific OIDC logic from SSO registration & deregistration scripts

[waleedlatif1]

Summary

• updated registration & deregistration script for explicit support for Entra ID
• removed provider-specific logic

Type of Change

• Bug fix

Testing

Tested manually, ran tests with 10 of the most common OIDC providers to validate the method works

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Review	Updated (UTC)
docs	Ready	Preview, Comment	Jan 20, 2026 3:17am

[greptile-apps]

Greptile Summary

This PR successfully removes provider-specific hardcoded OIDC logic (Okta, Auth0, IdentityServer patterns) and replaces it with a more flexible approach that supports both explicit endpoint configuration and standard OIDC discovery.

Key Changes:

• Added optional endpoint fields to registration schema (authorizationEndpoint, tokenEndpoint, userInfoEndpoint, jwksEndpoint)
• Implemented OIDC discovery fallback when explicit endpoints aren't fully provided
• Removed brittle URL pattern matching for specific providers
• Applied consistent changes across both the API route and database registration script
• Cleaned up unrelated code (removed unused shouldUseProxy, updated logger names, refactored getBaseUrl usage)

Issues Found:

• Partial endpoint configuration is not preserved: if any required endpoint is missing, discovery overwrites ALL endpoints including explicitly provided ones (see inline comments on route.ts:200 and register-sso-provider.ts:433)

Confidence Score: 4/5

• This PR is safe to merge with minor improvements recommended
• The refactoring successfully removes provider-specific logic and implements a more maintainable OIDC discovery approach. The logic issue with partial endpoint configuration is non-critical since the all-or-nothing approach is acceptable, though a fallback pattern would be better. The PR was manually tested with 10 OIDC providers according to the description.
• Pay attention to apps/sim/app/api/auth/sso/register/route.ts and packages/db/scripts/register-sso-provider.ts for the endpoint configuration logic

Important Files Changed

Filename	Overview
apps/sim/app/api/auth/sso/register/route.ts	Replaced provider-specific endpoint logic with OIDC discovery and optional explicit endpoint configuration
packages/db/scripts/register-sso-provider.ts	Added OIDC discovery support with proper endpoint resolution when explicit endpoints not provided

[greptile-apps]

_{6 files reviewed, 1 comment}

_{Edit Code Review Agent Settings | Greptile}

[waleedlatif1]

@greptile

[greptile-apps]

_{6 files reviewed, 2 comments}

_{Edit Code Review Agent Settings | Greptile}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.}