SSO and SCIM

Group workspaces can now sign in through their identity provider with SAML, and provision and remove people with SCIM, so roles in Tessel follow the groups you already manage.

What changed

• SAML single sign-on, with sign-in by password turned off for the workspace.
• SCIM provisioning that maps groups to Tessel roles per entity.