Add functionality to allow automated configuration of IdP (LDAP, SAML, OIDC,...)

Self Hosted Customers want a way to configure and setup instana in a completely automated way with no/minimal manual intervention.

Standard case is that you will also want to configure IdP in your tenant unit (e.g. LDAP, SAML, ...). This is not possible at the moment - it would be manually tasks on every setup/re-setup of a instana tenant unit.

We found REST API to

• configure IdP Group Mappings (https://instana.github.io/openapi/#operation/createGroupMapping)

• delete IdP configuration (e.g. https://instana.github.io/openapi/#operation/createGroupMapping)

.... BUT NOT for creating/configuring IdP itself.

At the moment setting up IdP is not possible in an automated way (neither via Tenant Units Secret, Unit CR nor via Instana REST API).

We raise request to add a way to configure IdP in Instana Tenant Unit in an automated way (either via Tenant Unit CR+Secret) or via Instana REST API).

Note:

• Reverse engineering internal UI API calls to replicate this functionality in a non Instana Product Documented way should not be way to go. It should be added to official instana REST API.

• Argumenting against implementing it with "Creating and enabling an SSO configuration requires experience and high confidence in the config values, otherwise all users, including admin can be locked out of the product" is NOT valid from our perspective, as you could also do this via UI and such configs should ALWAYS only be done by people with experice and also permission ("canConfigureAuthenticationMethods") - Also the way to solve such situation is already documented and well known: https://www.ibm.com/docs/en/instana-observability/current?topic=edition-troubleshooting#deactivating-sso-provider-configurations-ldapsamloidc