Single sign-on docs for Cloud (#641)

---------

Co-authored-by: Tomas Mizera <tomas.mizera@lutraconsulting.co.uk>

Author: alex-cit

scripts/wordlist.txt

@@ -135,6 +135,7 @@ SLA
 SMTP
 SQLAlchemy
 SSH
+SSO
 SVG
 SVGs
 SaaS
@@ -291,14 +292,15 @@ workspaces
 www
 zlib
 zoomstack
+Entra
+Auth
+SAML
+OIDC
 SSO
 Ory
 Polis
 SAML
-sso
 yaml
-Entra
 pre
 env
-OIDC
-IDP
+IDP

src/.vitepress/components/DashboardName.vue

@@ -0,0 +1,3 @@
+<template>
+  <span class="nospellcheck">Mergin Maps dashboard</span>
+</template>

src/.vitepress/components/DashboardNameShort.vue

@@ -0,0 +1,3 @@
+<template>
+  <span class="nospellcheck">dashboard</span>
+</template>

src/setup/sign-up-to-mergin-maps/dashboard-sso-sign-up.jpg

@@ -1,17 +1,28 @@
-# How to Sign Up to Mergin Maps
-[[toc]]
+---
+outline: deep
+---
 
-To make full use of the <MainPlatformNameLink /> service, you need to sign up. You can sign up either through <MainDomainNameLink /> or from your mobile device using the <MobileAppName />.
+# How to Sign Up to Mergin Maps
 
-Public projects can be accessed and downloaded even without a <MainPlatformNameLink /> account, but projects can be managed, shared and synchronised only when you are logged in.
+To make full use of <MainPlatformName />, you need to sign up. You can sign up using:
+- [Email and password](#email-and-password-sign-up)
+- [Single sign-on (SSO)](#single-sign-on-sso)
 
 ::: tip Manage your account
 Do you want to delete your account or change your details? Go to [**User Account**](../../manage/account/) for detailed steps.
 :::
 
-## From web
+::: tip Account-less access
+Public projects can be accessed and downloaded even without a <MainPlatformName /> account. However, to manage, share or upload changes to projects, you need to be signed in.
+:::
+
+## Email and password sign up
+
+Password sign up to <MainPlatformName/> is available via <DashboardNameShort/> or <MobileAppNameShort/>.
 
-1. Navigate to <AppDomainNameLink id=register />
+### From dashboard 
+
+1. Navigate to <AppDomainNameLink/>
 
 2. Fill in the registration form and click on **Sign Up**.
    ![Mergin Maps sign up form](./mergin-web-sign-up.jpg "Mergin Maps sign up form")
@@ -39,7 +50,9 @@ You can get up-to-speed quickly by following our [Quick Start tutorials](../../t
    See our <MainDomainNameLink id="pricing" desc="pricing page"/> for more details.
    :::
 
-### Invitation to a workspace
+<!--- is this section still relevant?
+
+#### Invitation to a workspace
 If someone invited you to join their workspace, you will get an email with the invitation link. You need to have a <MainPlatformName /> account in order to contribute to this workspace. 
 
 1. Use the link to get the registration form. Your email address will be filled in automatically, so you just need to enter a username and password. 
@@ -53,8 +66,9 @@ If someone invited you to join their workspace, you will get an email with the i
 
 You can get up-to-speed quickly by following our [Quick Start tutorials](../../tutorials/capturing-first-data/).
 
+-->
 
-## From Mergin Maps mobile app
+### From mobile app {#from-mergin-maps-mobile-app}
 You can also sign up from <MobileAppName />.
 
 1. Download the <MobileAppNameShort /> to your Android device, iPhone or iPad. You can find it in the app store of your platform:
@@ -90,3 +104,69 @@ You can get up-to-speed quickly by following our [Quick Start tutorials](../../t
    See our <MainDomainNameLink id="pricing" desc="pricing page"/> for more details.
    :::
 
+## Single sign-on (SSO)
+Single sign-on (SSO) is an authentication method that allows you to sign in to <MainPlatformName /> using the same credentials as you use in your organisation. 
+
+This means you don't have to create a new <MainPlatformName /> account with a specific password: you can simply use your work email. The identity provider (e.g. Microsoft Entra ID or Auth0) used by your organisation will check your credential and redirect you back to <MainPlatformName />.
+
+<MainPlatformName /> account will be created automatically after the first sign in via SSO.
+
+SSO is available on the <DashboardNameShort />, the <MobileAppNameShort /> and the <QGISPluginNameShort />.
+
+### Connection setup
+If you are the admin or owner of a workspace and you want to set up SSO, please contact our <MainDomainNameLink id="contact-sales" desc="sales team"/>.
+
+You will receive a link with step-by-step guide for your identity provider. Currently, we support **SAML** and **OIDC** SSO protocols. Directory sync is not supported.
+
+::: tip SSO for self-hosted servers <ServerType type="EE" />
+If you want to use SSO on your <EnterprisePlatformNameLink /> server, you can do so from the admin panel. See [Single Sign-On Deployment](../../server/sso-deployment/) for more details.
+
+SSO is not available for <CommunityPlatformName />.
+:::
+
+Once SSO is configured for your workspace, you will see the relevant information in the <DashboardLink id="settings" desc="workspace settings page"/>, under the *advanced* section. If you need to make any changes to your SSO connection, please <MerginMapsEmail id="support" desc="contact our support team"/>.
+
+![Mergin Maps workspace settings with enabled SSO](./dashboard-workspace-settings-sso.jpg "Mergin Maps workspace settings with enabled SSO")
+
+### From dashboard
+To sign in or sign up to <MainPlatformName /> using SSO on the <DashboardShortLink />:
+1. Navigate to <AppDomainNameLink />
+2. Click on the **Continue with SSO** button
+3. Enter your email address associated with your organisation and click **Sign in**
+4. You will be redirected to an identity provider. Enter your credentials.
+5. After being redirected back to the <DashboardShortLink /> , you will be signed in.
+
+![Mergin Maps dashboard single sign-on](./dashboard-sso-sign-up.jpg "Mergin Maps dashboard single sign-on")
+
+### From mobile app
+
+1. Open the <MobileAppNameShort />. Tap the account icon in the upper right corner to go to the login page. 
+   ![Mergin Maps mobile app account icon](./mobile-app-account-icon.jpg "Mergin Maps mobile app account icon")
+
+2. Tap the **Continue with SSO** option
+   ![Mergin Maps mobile app single sign-on](./mobile-sso-sign-in.jpg "Mergin Maps mobile app single sign-on")
+
+4. Enter your email address associated with your organisation and click **Sign in**.
+   
+   You will be redirected to an identity provider. Enter your credentials.
+   
+5. After successful authentication, you will be signed in to <MainPlatformName /> in the <MobileAppNameShort />.
+
+
+### From QGIS plugin
+
+::: warning QGIS version 3.40.0 or higher is required
+<QGISPluginName /> installed on QGIS version lower than 3.40.0 will not have the option to sign in via SSO.
+:::
+
+To use SSO in the <QGISPluginNameShort />:
+1. Open QGIS
+2. On the toolbar, click on the **Configure <MainPlatformName /> plugin** button
+   ![Configure Mergin Maps Plugin](../install-mergin-maps-plugin-for-qgis/qgis-configure-mergin-plugin.jpg "Configure Mergin Maps Plugin")
+3. Use the **Continue with SSO** option to open SSO sign in
+   ![Mergin Maps QGIS plugin single sign-on](./plugin-sso-sign-in.jpg "Mergin Maps QGIS plugin single sign-on")
+4. Enter your email address associated with your organisation and click **OK**.
+   
+   You will be redirected to an identity provider. Enter your credentials.
+5. After successful authentication, you will be signed in to <MainPlatformName /> in <QGISPluginNameShort />.
+