- Integrated MSAL authentication for web pages
- Added AuthMiddleware.php for SSO orchestration
- Added JWTValidator.php for token validation
- Protected report.php and webhook_caller.php
- Firebase PHP-JWT for token verification
- SSO can be disabled for local development
- Complete SSO setup documentation
- Environment-based configuration
