Sso create new user

[hardillb]

closes #4051

Description

Allows SSO configurations to be configured to create new users when they sign in for the first time.

Currently only supports SAML SSO providers.

Adds new flag to SSO config.

Related Issue(s)

#4051

Checklist

• I have read the contribution guidelines
• Suitable unit/system level tests have been added and they pass
• Documentation has been updated
  • Upgrade instructions
  • Configuration details
  • Concepts
• Changes flowforge.yml?
  • Issue/PR raised on FlowFuse/helm to update ConfigMap Template
  • Issue/PR raised on FlowFuse/CloudProject to update values for Staging/Production

Labels

• Includes a DB migration? -> add the area:migration label

[hardillb]

Need to work out how to test this

Also will need a doc update.

And before review will need the large chuck of commented out code removing.

[codecov]

Codecov Report

Attention: Patch coverage is 35.22013% with 103 lines in your changes missing coverage. Please review.

Project coverage is 78.16%. Comparing base (1465065) to head (f0b546e).
Report is 92 commits behind head on main.

Files	Patch %	Lines
forge/ee/lib/sso/index.js	7.69%	60 Missing ⚠️
forge/ee/routes/sso/auth.js	8.82%	31 Missing ⚠️
forge/lib/userTeam.js	80.00%	11 Missing ⚠️
forge/routes/auth/index.js	80.00%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4207      +/-   ##
==========================================
- Coverage   78.63%   78.16%   -0.48%     
==========================================
  Files         286      287       +1     
  Lines       13106    13261     +155     
  Branches     2931     2965      +34     
==========================================
+ Hits        10306    10365      +59     
- Misses       2800     2896      +96     

Flag	Coverage Δ
backend	78.16% <35.22%> (-0.48%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[knolleary]

Have tested against Entra and all working nicely.

Next up - will verify behaviour with Google workspace and LDAP

[knolleary]

Testing with Azure and Google - working nicely.

One set of changes requested - renaming the extracted function to completeUserSignup as it does more than just create the team. I think I've proposed all the necessary changes. Also modified it to export an object, rather than the bare function.

[knolleary]

Will do one final test through with those last changes then good to merge