Merge branch 'ory:master' into refactor/flutter-quickstart

Author: pi1814

docs/intro.mdx

@@ -67,30 +67,39 @@ around identities, sessions, login, OAuth2, permissions, and more. The core comp
 
 Ory Network incorporates the open-source [Ory Kratos Identity Server](https://www.ory.sh/kratos) and offers:
 
-- **Self-service** flows are everything users do on their own / without the help of others:
-- Registration with passwords, social sign-in, OpenID Connect, ...
-- Login with passwords, social sign-in, OpenID Connect, ...
-- Updating the profile, email, changing the password, un/linking with social sign-in providers, ...
+- Self-service flows are everything users do on their own / without the help of others:
+- Registration with passwords, social sign-in, OpenID Connect, passkeys, and more.
+- Login with passwords, social sign-in, OpenID Connect, passkeys, and more.
+- Updating the profile, email, changing the password, un/linking with social sign-in providers, and more.
 - Recovering the account by resetting the password.
-- Verifying email addresses, phone numbers,...
+- Verifying email addresses, phone numbers, and more.
 - Multi-factor authentication flows and recovery processes.
-- **Administrative identity management** to get, create, update, and delete identities (users) and their data.
-- **Headless APIs and data models** allow you to fully customize Identity Schemas (for example adding fields like first name,
-  accept tos, shipping address, gender, ...) and create your login, registration, profile settings, recovery, and verification
-  screen using SDKs and REST APIs.
+- Administrative identity management to get, create, update, and delete identities and their data.
+- Headless APIs and data models allow you to fully customize Identity Schemas - for example adding fields like name, accept ToS,
+  phone number - and create your login, registration, profile settings, recovery, and verification screen using SDKs and REST
+  APIs.
+- SCIM support for automated user provisioning and deprovisioning with supported identity providers.
 
 ### Permissions and relationships
 
 Ory Network incorporates the open-source [Ory Keto Permission Server](https://www.ory.sh/keto) and offers:
 
-- **Permission management** to get, create, update, and delete permissions.
-- **Permission checking** to check if a user has a permission.
+- Permission management to get, create, update, and delete permissions.
+- Permission checking to check if a user has a permission.
 
 ### OAuth2 and OIDC
 
 Ory Network incorporates the open-source [Ory Hydra OAuth2 & OpenID Server](https://www.ory.sh/hydra) and offers:
 
-- **Fully featured OAuth2 & [OpenID Certified](https://openid.net/developers/certified/)® OIDC Provider**
+- Fully featured OAuth2 & [OpenID Certified](https://openid.net/developers/certified/)® OIDC Provider
+
+### SAML
+
+Ory Network incorporates the open-source [Ory Polis](https://www.ory.sh/polis) and offers:
+
+- Enterprise SSO integration with SAML identity providers such as Okta, Azure AD, and Google Workspace.
+- Simplified SSO flow by implementing SSO as a standard OAuth 2.0 flow, abstracting away the complexities of SAML.
+- Act as a SAML Identity Provider (IdP).
 
 ### Ory Console
 
@@ -118,18 +127,3 @@ in the world. Ory is not another company "greenwashing" with open source by publ
 all Ory core systems are available as Apache 2.0 licensed software without enterprise or open-core models.
 
 Head over to the [Ory Open Source Overview](./open-source.mdx) for an introduction to the different projects.
-
-### Is open source taking a back seat?
-
-**No!**
-
-Ory Network is the commercial offering which generates revenue to sustain high quality development and add more features to Ory
-Open Source. The value proposition and vision for Ory Network is to incorporate and advance the open-source ecosystem and add
-additional services which aren't possible to open source (for example analytics, SLAs, SRE, low-latency).
-
-The Ory Network and Ory Open Source software are interlinked. Ory Network is using the [Ory Open Source](https://github.com/ory/)
-code base, APIs, features, and configurations to provide services. Ory Network features modifications to better support the custom
-multi-tenant environment and operational (SRE) mode.
-
-In the future, Ory will continue to increase its open-source footprint. and make the projects easier to modify, use, access, and
-distribute. The biggest impact Ory Network will have is that it will accelerate and sustain the development of Ory Open Source.

docs/open-source.mdx

@@ -4,13 +4,13 @@ title: Ory is open source
 sidebar_label: Projects
 ---
 
+This document provides an overview of the most popular Ory open-source projects, and other related resources.
+
 Ory has an open-source architecture, attitude, and heart. We believe in collaboration, participation, and the open exchange of
 ideas. Open source is a fundamental part of modern software development and allows everyone regardless of economic background to
 build a better world with software.
 
-Therefore, most of what Ory does is open source. Read more about [Ory's commitment to open source](./open-source/commitment.mdx).
-
-This document provides an overview of our most popular open-source projects, and other related resources.
+Most of what Ory does is open source. Read more about [Ory's commitment to open source](./open-source/commitment.mdx).
 
 ## Projects
 
@@ -47,3 +47,19 @@ For many more visit [Ory on GitHub](https://github.com/ory).
 - [Ory Community Chat](https://slack.ory.sh/)
 - [GitHub discussions](https://github.com/discussions?discussions_q=org%3Aory)
 - [Ory Community Examples](https://github.com/ory/examples)
+
+## Is open source taking a back seat?
+
+No — open source remains at the core of Ory.
+
+The Ory Network and the Ory Enterprise License are commercial offerings designed to fund and accelerate the development of Ory
+Open Source. They enable long-term sustainability, support enterprise requirements, and provide capabilities that are difficult to
+deliver through open source alone — such as multi-tenancy, analytics, SLAs, SRE support, high scalability, high availability,
+globally distributed low-latency infrastructure, and more.
+
+Both Ory Network and the Ory Enterprise License are built on top of the [Ory Open Source](https://github.com/ory/) code base. They
+use the same APIs, features, and configurations, with enhancements tailored for multi-tenant architectures and enterprise-grade
+security and operations.
+
+Ory is committed to continuing the growth of its open-source ecosystem — making it even more accessible, customizable, and
+developer-friendly. The commercial offerings play a key role in accelerating and sustaining the development of Ory Open Source.

docs/reference/api.json

@@ -10421,6 +10421,19 @@
         "required": ["identifier", "method"],
         "type": "object"
       },
+      "updateOrganizationOnboardingPortalLinkBody": {
+        "properties": {
+          "enable_sso": {
+            "description": "Feature flag to enable SSO configuration",
+            "type": "boolean"
+          },
+          "expires_at": {
+            "$ref": "#/components/schemas/Time"
+          }
+        },
+        "required": ["enable_sso"],
+        "type": "object"
+      },
       "updateRecoveryFlowBody": {
         "description": "Update Recovery Flow Request Body",
         "discriminator": {
@@ -16843,6 +16856,83 @@
         ],
         "summary": "Delete an organization onboarding portal link",
         "tags": ["project"]
+      },
+      "post": {
+        "description": "Update a onboarding portal link for an organization.",
+        "operationId": "updateOrganizationOnboardingPortalLink",
+        "parameters": [
+          {
+            "description": "Project ID\n\nThe project's ID.",
+            "in": "path",
+            "name": "project_id",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "description": "Organization ID\n\nThe Organization's ID.",
+            "in": "path",
+            "name": "organization_id",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "in": "path",
+            "name": "onboarding_portal_link_id",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/updateOrganizationOnboardingPortalLinkBody"
+              }
+            }
+          },
+          "x-originalParamName": "Body"
+        },
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/onboardingPortalLink"
+                }
+              }
+            },
+            "description": "onboardingPortalLink"
+          },
+          "default": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/errorGeneric"
+                }
+              }
+            },
+            "description": "errorGeneric"
+          }
+        },
+        "security": [
+          {
+            "oryWorkspaceApiKey": []
+          }
+        ],
+        "servers": [
+          {
+            "description": "The Ory Network control plane API which is used to manage your Ory Network projects and workspaces.",
+            "url": "https://api.console.ory.sh"
+          }
+        ],
+        "summary": "Update organization onboarding portal link",
+        "tags": ["project"]
       }
     },
     "/projects/{project_id}/revision/{revision_id}": {

docs/self-hosted/oel/oel-hydra-image-tags.md

@@ -1,5 +1,7 @@
 | Image Tag                                | Release Date |
 | ---------------------------------------- | ------------ |
+| ea3038323329fb703a31bde1abc1a0cf41a08926 | 2025-06-23   |
+| 19fae4f763fa139db38db601000cb80b53ebde4d | 2025-06-20   |
 | 290abca8469dc46c1ba07708849fed28fdbc1b69 | 2025-06-11   |
 | d389bd4c1bc21c1cdaf5e60688314a5bf9bfce3e | 2025-06-06   |
 | d4f640cf72989adf24ba153919ede18d4cddc98e | 2025-05-27   |

docs/self-hosted/oel/oel-keto-image-tags.md

@@ -1,5 +1,7 @@
 | Image Tag                                | Release Date |
 | ---------------------------------------- | ------------ |
+| ea3038323329fb703a31bde1abc1a0cf41a08926 | 2025-06-23   |
+| 19fae4f763fa139db38db601000cb80b53ebde4d | 2025-06-20   |
 | de9debec0a2c8e8f35b2a8924cc133925162a0a6 | 2025-06-18   |
 | d389bd4c1bc21c1cdaf5e60688314a5bf9bfce3e | 2025-06-06   |
 | d4f640cf72989adf24ba153919ede18d4cddc98e | 2025-05-27   |

docs/self-hosted/oel/oel-kratos-image-tags.md

@@ -1,5 +1,7 @@
 | Image Tag                                | Release Date |
 | ---------------------------------------- | ------------ |
+| ea3038323329fb703a31bde1abc1a0cf41a08926 | 2025-06-23   |
+| 19fae4f763fa139db38db601000cb80b53ebde4d | 2025-06-20   |
 | de9debec0a2c8e8f35b2a8924cc133925162a0a6 | 2025-06-18   |
 | 290abca8469dc46c1ba07708849fed28fdbc1b69 | 2025-06-11   |
 | d389bd4c1bc21c1cdaf5e60688314a5bf9bfce3e | 2025-06-06   |

docs/self-hosted/oel/oel-oathkeeper-image-tags.md

@@ -1,5 +1,6 @@
 | Image Tag                                | Release Date |
 | ---------------------------------------- | ------------ |
+| ea3038323329fb703a31bde1abc1a0cf41a08926 | 2025-06-23   |
 | de9debec0a2c8e8f35b2a8924cc133925162a0a6 | 2025-06-18   |
 | d389bd4c1bc21c1cdaf5e60688314a5bf9bfce3e | 2025-06-06   |
 | 936e2f934cae31d47939e342dcc1e8c5f6f81fe7 | 2025-05-05   |