- Add customizable welcome text for the SSO wizard landing screen
- Support new Identity Provider PingFederate and introduce API to revoke SSO access tickets
- Enable ticket consumption on connection changes and allow custom login parameters (HRD, org auto‑membership) when creating tickets