Sambee turns your storage into a modern workspace by presenting SMB and local files in your browser.In the latest version 0.9 we added single sign-on via OpenID Connect. Given that configuring OIDC auth is not trivial, we tested and refined a lot until we got an implementation that seemed right to us. I ve listed some key insights below. What do you think we got right and what should be changed?- Treat the IdP as source of truth. - Configuration: focus on UX and guide the admin through the setup process. - Prevent lock-out: ensure the admin making the configuration will still have admin rights once OIDC is enabled before activating OIDC login. - Auto-provision OIDC users. Don t require the admin to create user accounts in your product. They already maintain users on their OIDC s identity server. - Delegate your product s permission management to the IdP. Map one OIDC group to your product s admin role, another to your product s user role.