CHW-4116 SSOConfigInvalid

SSO configuration payload is missing required fields for the chosen protocol

Default message: SSO configuration payload is missing required fields for the chosen protocol
HTTP status: 400 (client)

Problem. The SSO configuration PUT payload is missing required fields for the chosen protocol, or references an unknown role. Cause. For OIDC the handler requires issuer_url and client_id; for SAML it requires saml_idp_metadata_url; in both cases a default_role that does not exist in the org’s role catalog is rejected. Fix. Populate the required fields for the protocol and pick a known default_role. HTTP 400.