From 5b242921989accc7ab9ffa5c326d8c9453c78bbb Mon Sep 17 00:00:00 2001
From: Thomas Stocker <thomas.stocker.pro@gmail.com>
Date: Tue, 4 Nov 2025 11:12:20 +0100
Subject: [PATCH] feat: add SAML config generation in entrypoint

Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
---
 docs/DOCKER_ENVIRONMENT_VARIABLES.md | 9 +++++++++
 entrypoint.sh                        | 6 ++++++
 2 files changed, 15 insertions(+)

diff --git a/docs/DOCKER_ENVIRONMENT_VARIABLES.md b/docs/DOCKER_ENVIRONMENT_VARIABLES.md
index 5f5ec6b5e..e52fc3329 100644
--- a/docs/DOCKER_ENVIRONMENT_VARIABLES.md
+++ b/docs/DOCKER_ENVIRONMENT_VARIABLES.md
@@ -126,6 +126,15 @@ This document provides a comprehensive reference for all environment variables u
 | `OPENAI_TEMPERATURE` | Temperature parameter for OpenAI completions (0.0-2.0) | `0.1`         | No       |
 | `OPENAI_MODEL_NAME`  | OpenAI model name to use                               | `gpt-4o`      | No       |
 
+## SAML Authentication
+
+| Variable                        | Description                                                       | Default Value           | Required |
+| ------------------------------- | ----------------------------------------------------------------- | ----------------------- | -------- |
+| `SAML_SESSION_DURATION`         | SAML session validity duration in seconds                         | `604800` (7 days)       | No       |
+| `SAML_CLEANUP_INTERVAL_SECONDS` | Interval in seconds for cleaning up expired SAML sessions (0=off) | `0` (disabled)          | No       |
+| `SAML_CERTIFICATE`              | SAML service provider certificate in PEM format                   | -                       | No       |
+| `SAML_PRIVATE_KEY`              | SAML service provider private key in PEM format                   | -                       | No       |
+
 ## Custom Domains
 
 | Variable                            | Description                                           | Default Value         | Required |
diff --git a/entrypoint.sh b/entrypoint.sh
index 6f8ba49f3..a08ddc029 100644
--- a/entrypoint.sh
+++ b/entrypoint.sh
@@ -24,6 +24,12 @@ unit:
     export-timeout: ${TRACING_EXPORT_TIMEOUT:-30}
     max-queue-size: ${TRACING_MAX_QUEUE_SIZE:-2048}
 
+saml:
+  session-duration: ${SAML_SESSION_DURATION:-604800}
+  cleanup-interval-seconds: ${SAML_CLEANUP_INTERVAL_SECONDS:-0}
+  certificate: "${SAML_CERTIFICATE:-}"
+  private-key: "${SAML_PRIVATE_KEY:-}"
+
 probod:
   base-url: "${PROBOD_BASE_URL:-http://localhost:8080}"
   encryption-key: "${PROBOD_ENCRYPTION_KEY:?PROBOD_ENCRYPTION_KEY is required}"