Add SAML group mapping

backend/src/db/migrations/20250926000000_saml-configs-group-sync-fields.ts

@@ -0,0 +1,23 @@
+import { Knex } from "knex";
+
+import { TableName } from "../schemas";
+
+export async function up(knex: Knex): Promise<void> {
+  const hasEnableGroupSyncCol = await knex.schema.hasColumn(TableName.SamlConfig, "enableGroupSync");
+
+  await knex.schema.alterTable(TableName.SamlConfig, (tb) => {
+    if (!hasEnableGroupSyncCol) {
+      tb.boolean("enableGroupSync").notNullable().defaultTo(false);
+    }
+  });
+}
+
+export async function down(knex: Knex): Promise<void> {
+  const hasEnableGroupSyncCol = await knex.schema.hasColumn(TableName.SamlConfig, "enableGroupSync");
+
+  await knex.schema.alterTable(TableName.SamlConfig, (t) => {
+    if (hasEnableGroupSyncCol) {
+      t.dropColumn("enableGroupSync");
+    }
+  });
+}

backend/src/db/schemas/saml-configs.ts

@@ -28,7 +28,8 @@ export const SamlConfigsSchema = z.object({
   lastUsed: z.date().nullable().optional(),
   encryptedSamlEntryPoint: zodBuffer,
   encryptedSamlIssuer: zodBuffer,
-  encryptedSamlCertificate: zodBuffer
+  encryptedSamlCertificate: zodBuffer,
+  enableGroupSync: z.boolean().default(false)
 });
 
 export type TSamlConfigs = z.infer<typeof SamlConfigsSchema>;