Pressero SSO integration with auto-auth widget and bulk subscriber import

Description: Request a native integration with Pressero that enables Single Sign-On (SSO), an embeddable in-app widget that auto-authenticates active Pressero subscribers, and tooling to bulk import subscribers. Purpose: As an admin, I want to connect our tenant to Pressero for SSO and auto-authenticated access via an embedded widget, so that Pressero subscribers can seamlessly use our app without extra logins and we can quickly onboard users in bulk. Benefits: Seamless login experience for Pressero subscribers, reducing friction and support tickets. Faster onboarding through bulk import, minimizing manual entry and errors. Stronger security and compliance with centralized identity and least-privilege access. Improved adoption and engagement from in-context widget access. Key Features: SSO with Pressero via SAML 2.0 or OpenID Connect (OIDC), including metadata import, certificate management, and role/claim mapping. Embeddable in-app widget (JS snippet) that detects Pressero session and auto-authenticates users via secure token handoff; responsive and accessible. Bulk subscriber import via CSV upload and Pressero API sync; mapping, validation, dry-run, upsert, deduplication, and error reporting. JIT user provisioning and deprovisioning based on subscription status; configurable default roles and org assignment. Admin UI for configuration, test connection, logs, and monitoring; environment-specific configs (staging/production). Security: encrypted secrets, short-lived tokens (JWT), logout and session controls, audit logs. Clear documentation and support guides for setup and troubleshooting.