Document multi-user setup and SSO options

[science]

Summary

Document how to add users to DefectDojo and explore SSO integration options.

Current State

• Only admin user exists
• Each developer could have their own account to view findings for their products
• No SSO configured

Tasks

• Document manual user creation process
• Research SAML/OIDC SSO options for DefectDojo
• Consider GitHub OAuth integration
• Document user role permissions (staff vs superuser vs read-only)

User Roles in DefectDojo

• Superuser: Full admin access
• Staff: Can manage products/engagements
• Reader: Can view findings (good for developers)

SSO Options

• DefectDojo supports SAML
• Could integrate with GitHub, Okta, Google Workspace