Organization-level SSO configuration with domain restrictions

Allow organizations to configure SSO settings at the org level, including selecting a single SSO provider, restricting access to specific email domains. This gives organizations more control over authentication methods and access policies.