Allow more flexibility in SSO email domain filter

[knolleary]

Description

Currently, SSO is enabled for an entire email domain - such as @example.com. This is how the platform identifies if a user should use SSO or not.

We have a customer with multiple email domains representing different countries: @example.com, @example.it @example.pl @uk.example.com @example.co.uk etc.

Creating a separate SSO configuration for each of those domains is an administrative headache on both sides.

It would be helpful if the email domain filter for SSO configurations was more flexible. For example, supporting a wildcard glob - eg @example.*, or a comma-separated list of domains to match (or both...)

We would probably want to apply some strict rules as to what is supported - ie globs vs full regex.

https://app-eu1.hubspot.com/contacts/26586079/record/0-2/13089944531

Which customers would this be available to

Everyone - CE/Starter/Team/Enterprise

Have you provided an initial effort estimate for this issue?

I have provided an initial effort estimate