EZGH SSO API

EZGH SSO's management API: the organization's workforce directory and its users, groups and sessions; verified email domains and upstream identity providers (OIDC and SAML) for federated sign-in; applications that sign in through the directory (OIDC, SAML 2.0 and EZGH apps), their assignments, client secrets and outbound SCIM provisioning; the application catalog; directory SCIM tokens; custom domains; and branding. Directory users sign in at https://.sso.ezgh.app (or a custom domain), whose OpenID Connect, OAuth and SAML endpoints are standards-defined and documented separately. Inbound SCIM 2.0 (https://sso.ezghcloud.com/scim/v2, RFC 7644, a directory SCIM token only) describes itself through its discovery endpoints.