Overview
The Hub supports single sign-on via a shared federation framework (5app/hub, auth/modules/federation/). Every provider — LinkedIn OAuth2/OIDC, or any SAML 2.0 identity provider — is resolved dynamically, per request, from the domain's configuration; there is no per-provider route or Passport strategy registered up front. This page documents the mechanics shared by every provider. Provider-specific setup lives on its own page: