Handles SAML 2.0 authentication callback from configured identity providers. This endpoint receives the SAML assertion from the IdP after user authentication, validates the response, extracts user identity and RBAC roles, and creates an authenticated HTTP session. On success, sets session and CSRF token cookies, then redirects to the main application. Requires pre-configured SAML settings in Orchestrator.