// Configure SSO for a tenant
const ssoConfig = {{
  provider: 'okta', // or 'azure-ad', 'google-workspace'
  domain: 'your-company.okta.com',
  clientId: 'your-client-id',
  clientSecret: 'your-client-secret',
  tenant: 'acme-corp'
}};

const result = await blocks.auth.configureSSO(ssoConfig);

if (result.success) {{
  console.log('SSO configured successfully!');
  console.log('Login URL:', result.loginUrl);
  console.log('Metadata URL:', result.metadataUrl);
}}

// That's it. Time for that beer now.

// Different SSO per tenant
const tenantConfigs = [
  {{
    tenant: 'acme-corp',
    provider: 'okta',
    domain: 'acme.okta.com'
  }},
  {{
    tenant: 'tech-co',
    provider: 'azure-ad',
    domain: 'techco.onmicrosoft.com'
  }},
  {{
    tenant: 'startup-inc',
    provider: 'google-workspace',
    domain: 'startup.com'
  }}
];

// Configure all tenants
for (const config of tenantConfigs) {{
  await blocks.auth.configureSSO(config);
}}

// All running simultaneously. All isolated. All secure.

// SAML setup (unfortunately, yes)
const samlConfig = {{
  tenant: 'enterprise-corp',
  provider: 'saml',
  entityId: 'https://enterprise.com/saml',
  ssoUrl: 'https://enterprise.com/sso',
  certificate: process.env.SAML_CERT,
  attributes: {{
    email: 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress',
    name: 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name',
    groups: 'http://schemas.microsoft.com/ws/2008/06/identity/claims/groups'
  }}
}};

await blocks.auth.configureSSO(samlConfig);

// We handle the XML nightmares so you don't have to

// React component for SSO login
import {{ useSSO }} from '23blocks-react';

function LoginPage() {{
  const {{ initiateSSO, isLoading, error }} = useSSO();
  
  const handleSSOLogin = async (tenant) => {{
    try {{
      // Redirects to IdP automatically
      await initiateSSO({{ tenant }});
    }} catch (err) {{
      console.error('SSO login failed:', err);
    }}
  }};
  
  return (
    <div>
      <button onClick={{() => handleSSOLogin('acme-corp')}}>
        Sign in with Acme Corp
      </button>
      <button onClick={{() => handleSSOLogin('tech-co')}}>
        Sign in with TechCo
      </button>
    </div>
  );
}}