client.admin.createSsoConnection(params: CreateSsoConnectionParams): Promise<SsoConnection>

const connection = await client.admin.createSsoConnection({
  organizationId: "org_abc123",
  name: "Okta SAML",
  type: "saml",
  saml: {
    metadataUrl: "https://acme.okta.com/app/123/sso/saml/metadata",
    // OR provide raw metadata XML:
    // metadataXml: "<md:EntityDescriptor ...>",
    defaultRole: "member",
    attributeMapping: {
      email: "NameID",
      firstName: "firstName",
      lastName: "lastName",
      groups: "groups",
    },
  },
});

console.log(connection.id);                // "sso_abc123"
console.log(connection.status);            // "active"
console.log(connection.saml.acsUrl);       // ACS URL to give to the IdP
console.log(connection.saml.entityId);     // SP Entity ID
console.log(connection.saml.metadataUrl);  // SP metadata URL

const connection = await client.admin.createSsoConnection({
  organizationId: "org_abc123",
  name: "Azure AD OIDC",
  type: "oidc",
  oidc: {
    discoveryUrl: "https://login.microsoftonline.com/tenant-id/v2.0/.well-known/openid-configuration",
    clientId: "azure-client-id",
    clientSecret: "azure-client-secret",
    defaultRole: "member",
  },
});

const connections = await client.admin.listSsoConnections({
  organizationId: "org_abc123",
});

for (const conn of connections.connections) {
  console.log(conn.id, conn.name, conn.type, conn.status);
}

await client.admin.updateSsoConnection({
  connectionId: "sso_abc123",
  name: "Updated Okta SAML",
  saml: {
    metadataUrl: "https://acme.okta.com/app/456/sso/saml/metadata",
  },
});

await client.admin.deleteSsoConnection({
  connectionId: "sso_abc123",
});