UCS, SSO & LDAP Integration / READ FIRST -- 3

ONLY specialist are needed. i do a small technically questionare because here are many low level people here, which pretend to be knowledgeable. i see in 5 mins your level and i am feed up with "dispute" and all the chatting. the job, when you know what do to is maybe 5 hours.
START IMMEDITELY (and dont write, if you tell me you need multiple days)

I need an advanced Univention Corporate Server specialist to tighten up identity management across several components in my environment.

Within UCS
• Configure Single Sign-On flows for OAuth, SAML and OpenID Connect so users can move seamlessly between services.
• Deploy and validate SSL/TLS certificates for every relevant UCS service, automating renewal where possible.
• install and Connect Relution to the UCS directory and the new SSO endpoints, ensuring enrolled devices inherit the same credentials.

Outside UCS
• Hook an existing Inuvika OVD installation into the UCS LDAP, mapping groups and attributes so entitlements remain consistent.

Deliverables must include:
1. Fully operational SSO for the three protocols above, demonstrated with at least two sample applications.
2. Verified HTTPS endpoints with no certificate warnings.
3. Relution and Inuvika logins working with UCS accounts.
4. A concise hand-over document covering changes, commands and rollback steps.

All work happens on Linux servers; I can grant SSH access and provide test accounts on request. Let me know your proposed sequence and estimated time to completion so we can plan maintenance windows together.

working on my notebook per anydesk

current status: all UCS are setup and running, ldap running, all servers are uptodate (one server for relution is the webinterface down, the certs need to be fixed first).