create the SSO Domain Restrictions page (#102)

Author: DebashisBorgohainO2

docs/images/add-new-domain-sso-restrict.png

@@ -5,4 +5,5 @@ nav:
     - Templates: templates.md
     - Audit trail: audit-trail.md
     - Cipher Keys: cipher-keys.md
-    - Nodes in OpenObserve: nodes.md
+    - Nodes in OpenObserve: nodes.md
+    - SSO Domain Restrictions: sso-domain-restrictions.md

docs/images/allow-all-users.png

@@ -2,9 +2,10 @@ The Management section includes tools for maintaining and securing OpenObserve o
 
 Learn more: 
 
-- [Query Management](query-management.md)
-- [Alert Destinations](alert-destinations.md)
-- [Templates](templates.md)
-- [Audit trail](audit-trail.md)
-- [Cipher Keys](cipher-keys.md)
-- [Nodes in OpenObserve](nodes.md)
+- [Query Management](../management/query-management/)
+- [Alert Destinations](../management/alert-destinations/)
+- [Templates](../management/templates/)
+- [Audit trail](../management/audit-trail/)
+- [Cipher Keys](../management/cipher-keys/)
+- [Nodes in OpenObserve](../management/nodes/)
+- [SSO Domain Restrictions](../management/sso-domain-restrictions/)

docs/images/allow-specific-users.png

@@ -0,0 +1,77 @@
+---
+title: SSO Domain Restrictions User Guide - OpenObserve Enterprise
+description: Learn how to configure SSO domain restrictions in OpenObserve Enterprise to control user access by email domains and enhance security.
+---
+> This feature is only available in the OpenObserve Enterprise Edition. 
+
+This user guide provides step-by-step instructions for configuring and managing **SSO Domain Restrictions** in OpenObserve. <br>
+This feature allows you to control which users can log in to OpenObserve using Single Sign-On (SSO) providers. You can allow access to specific domains or even individual users from those domains.
+
+!!! note "Where to Find"
+    The **SSO Domain Restrictions** page is available in the `_meta` org under **Management**.
+
+!!! note "Who Can Access"
+    `Root` user and any other user who has access to the `_meta` org can access the **SSO Domain Restrictions** page.
+
+## Add Domain Restrictions
+
+??? "Step 1: Add a New Domain"
+    1. In the **Domain and allowed users** section, enter the domain name in the text field. 
+    > Enter only the domain name, for example, `example.com` and do not include the `@` symbol. 
+    2. Click the **Add Domain** button. 
+    ![Add a New Domain](../../images/add-new-domain-sso-restrict.png)
+
+??? "Step 2: Configure Domain Access"
+
+    For each domain, you have two control options:
+
+    **Option 1: Allow All Users from Domain**<br>
+    It permits any user with an email address from the selected domain to log in using SSO. <br>
+    > **Use case:** Allow all employees from your company domain `@example.com`. 
+    <br>
+    ![Allow all users](../../images/allow-all-users.png)
+
+    **Option 2: Allow Specific Users Only**<br>
+    It allows you to add individual email addresses that should be permitted to log in using SSO.<br> 
+    > **Use case**: Allow only certain users from a partner organization. For example, `e1@example1.com` and `e2@example1.com`. 
+
+    When **Allow only specific users** is selected:
+    <br>
+    ![Allow only specific users](../../images/allow-specific-users.png)
+
+    1. Enter the complete email address in the input field. 
+    2. Click **Add Email**. 
+    3. The email address will be added to the allowed list. 
+    4. Repeat for additional users.
+    5. Use the **X** button next to any email to remove it. 
+
+??? "Step 3: Save Configuration"
+    1. Review your domain restrictions.
+    2. Click **Save Changes** to apply the configuration. 
+    3. Click **Cancel** to discard changes. 
+
+
+## Domain Limits 
+There is no limit on the number of domains you can configure. Add as many domains and specific users as needed for your organization. 
+
+## Error Messages
+When **SSO Domain Restrictions** are configured, any user attempting to log in from domains or email addresses that are **NOT** in the allowed list will see an `unauthorized` error during SSO login.
+
+## Supported SSO Login Options
+OpenObserve allows users to log in through the following Single Sign-On options, and domain restrictions apply to all of them:
+
+- GitHub 
+- GitLab
+- Google
+- Microsoft
+
+Domain restrictions will be enforced when users attempt to log in using any of these SSO options.
+
+## Troubleshooting
+**Problem**: SSO Domain Restrictions menu not visible. <br>
+**Solution**: Verify you are in the `_meta` organization. <br>
+
+**Problem**: Changes not taking effect. <br>
+**Solution**: Ensure you clicked **Save Changes** and refresh the login page. <br>
+
+