docs: Phase 3 Lab 04 complete -- 76/120 labs (63.3%), CHANGELOG v1.12.0, Sprint 16 done

Author: RedjiJB

CHANGELOG.md

@@ -8,12 +8,44 @@ This project adheres to [Keep a Changelog](https://keepachangelog.com/en/1.1.0/)
 
 ## [Unreleased]
 
-### Planned — Next Up (Phase 3 Lab 04 Sprint)
-- Phase 3 Lab 04 (SSO Integration) for: FreePBX, SuiteCRM, Odoo, OpenKM
+### Planned — Next Up (Phase 3 Lab 05 Sprint)
+- Phase 3 Lab 05 (Advanced Integration) for: FreePBX, SuiteCRM, Odoo, OpenKM
 - `it-stack-installer` operational scripts (`clone-all-repos.ps1`, `update-all-repos.ps1`, `install-tools.ps1`)
 
 ---
 
+## [1.12.0] — 2026-03-01
+
+### Added — Phase 3 Lab 04: SSO Integration (all 4 Phase 3 modules) — Sprint 16 complete
+
+Lab progress: 72/120 → 76/120 (60.0% → 63.3%). Phase 3 Lab 04 (SSO Integration) complete. Each module adds OpenLDAP directory, Keycloak 24 IdP, and module-specific SSO wiring (OIDC or SAML).
+
+| Module | LDAP Port | KC Port | SSO Protocol | Key Integration |
+|--------|-----------|---------|--------------|-----------------|
+| FreePBX (10) | 3890 | 8440 | OIDC (admin UI) | LDAP_ENABLED + KC OIDC client + freepbx realm |
+| SuiteCRM (12) | 3891 | 8441 | SAML | KC SAML metadata + EntityDescriptor test |
+| Odoo (13) | 3893 | 8450 | OIDC | KC OIDC discovery + LDAP_HOST env + gevent :8351 |
+| OpenKM (14) | 3892 | 8452 | SAML + LDAP | JAVA_OPTS ldap props + ES :9202 + KC SAML metadata |
+
+Container naming: `{module}-s04-{service}` (s04 = sso lab 04).
+
+#### Test Coverage Added
+- Keycloak admin API: obtain token → create `it-stack` realm → create module-specific OIDC/SAML client
+- OIDC discovery endpoint assertion: `/.well-known/openid-configuration` returns `issuer`
+- SAML descriptor assertion: `/protocol/saml/descriptor` returns `EntityDescriptor`
+- LDAP bind test from within LDAP container
+- Module container → Keycloak connectivity test
+- LDAP env vars verified in module containers
+- All 5-6 containers health-checked individually
+
+#### Commits
+- `9e3b371` — `it-stack-freepbx`: feat(lab-04): FreePBX SSO Integration
+- `4c77e6c` — `it-stack-suitecrm`: feat(lab-04): SuiteCRM SSO Integration
+- `ec859e0` — `it-stack-odoo`: feat(lab-04): Odoo SSO Integration
+- `40d80e9` — `it-stack-openkm`: feat(lab-04): OpenKM SSO Integration
+
+---
+
 ## [1.11.0] — 2026-03-01
 
 ### Added — Phase 3 Lab 03: Advanced Features (all 4 Phase 3 modules) — Sprint 15 complete 🎉 60% milestone!

docs/IT-STACK-TODO.md

@@ -315,16 +315,16 @@ All 5 repos have:
 | Module | Lab 01 | Lab 02 | Lab 03 | Lab 04 | Lab 05 | Lab 06 |
 |--------|--------|--------|--------|--------|--------|--------|
 | 09 · iRedMail | [x] | [x] | [x] | [x] | [x] | [x] |
-| 10 · FreePBX | [x] | [x] | [x] | [ ] | [ ] | [ ] |
+| 10 · FreePBX | [x] | [x] | [x] | [x] | [ ] | [ ] |
 | 11 · Zammad | [x] | [x] | [x] | [x] | [x] | [x] |
 
 ### Category 05: Business Systems
 
 | Module | Lab 01 | Lab 02 | Lab 03 | Lab 04 | Lab 05 | Lab 06 |
 |--------|--------|--------|--------|--------|--------|--------|
-| 12 · SuiteCRM | [x] | [x] | [x] | [ ] | [ ] | [ ] |
-| 13 · Odoo | [x] | [x] | [x] | [ ] | [ ] | [ ] |
-| 14 · OpenKM | [x] | [x] | [x] | [ ] | [ ] | [ ] |
+| 12 · SuiteCRM | [x] | [x] | [x] | [x] | [ ] | [ ] |
+| 13 · Odoo | [x] | [x] | [x] | [x] | [ ] | [ ] |
+| 14 · OpenKM | [x] | [x] | [x] | [x] | [ ] | [ ] |
 
 ### Category 06: IT & Project Management
 
@@ -342,7 +342,7 @@ All 5 repos have:
 | 19 · Zabbix | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] |
 | 20 · Graylog | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] |
 
-**Lab Progress:** 72/120 (60.0%) — Phase 1 complete (30/120) ✅ · Phase 2 complete (30/120) ✅ · Phase 3 Labs 01–03 complete (12/120) ✅ · 🎉 60% milestone!
+**Lab Progress:** 76/120 (63.3%) — Phase 1 complete (30/120) ✅ · Phase 2 complete (30/120) ✅ · Phase 3 Labs 01–04 complete (16/120) ✅
 
 ---
 
@@ -474,11 +474,12 @@ All 5 repos have:
 | ~~Sprint 12~~ | ~~Phase 2 Lab 06 (production deployment)~~ | ~~nextcloud·mattermost·jitsi·iredmail·zammad Lab 06~~ ✅ · Phase 2 COMPLETE 🎉 |
 | Sprint 13 ✅ | Phase 3 Lab 01 (standalone) | freepbx·suitecrm·odoo·openkm Lab 01 done |
 | Sprint 15 ✅ | Phase 3 Lab 03 (advanced features) | freepbx·suitecrm·odoo·openkm Lab 03 done |
-| Next session | Phase 3 Lab 04 (SSO integration) | freepbx·suitecrm·odoo·openkm Lab 04 |
+| Sprint 16 ✅ | Phase 3 Lab 04 (SSO integration) | freepbx·suitecrm·odoo·openkm Lab 04 done |
+| Next session | Phase 3 Lab 05 (advanced integration) | freepbx·suitecrm·odoo·openkm Lab 05 |
 | Sprint 14 ✅ | Phase 3 Lab 02 (external deps) | freepbx·suitecrm·odoo·openkm Lab 02 done |
 
 ---
 
 **Document Version:** 2.0  
 **Project:** IT-Stack | **Org:** it-stack-dev  
-**Last Updated:** 2026-03-01 — Phase 3 Lab 03 COMPLETE (72/120 labs, 60.0%) — Sprint 15 done ✅ 🎉 60% milestone!
+**Last Updated:** 2026-03-01 — Phase 3 Lab 04 COMPLETE (76/120 labs, 63.3%) — Sprint 16 done ✅