docs: convert SSO providers to accordions and clarify setup flow (#2971)

Author: devalog

fern/products/dashboard/pages/sso.mdx

@@ -3,17 +3,16 @@ title: Set up Single Sign-On (SSO)
 description: Let teammates sign in to Fern with your IdP (SAML or OIDC)
 ---
 
-<Markdown src="/snippets/enterprise-plan.mdx" />
+Set up Single Sign-On (SSO) to sign in to Fern using your existing identity provider.
 
-Set up Single Sign-On (SSO) to sign in to Fern using the identity provider you already use. SSO setup requires coordination with Fern: you'll need configuration values from Fern (like callback URLs and entity IDs) to set up your IdP, and you'll share your IdP metadata back with Fern to complete the connection.
-
-Choose SAML or OIDC depending on your IdP, then follow the steps below for Okta, Google Workspace, or Microsoft Entra.
+SSO setup requires working with Fern to exchange configuration values (like callback URLs and entity IDs). To get started, select your identity provider below (Okta, Google Workspace, or Microsoft Entra), then choose SAML or OIDC.
 
 <Note title="Using another provider?">
-  If you use another IdP, Fern will help you configure it. Reach out via Slack or [email protected] to get started. 
+  If you use another IdP, Fern will help you configure it. Reach out via Slack or [email protected] to get started.
 </Note >
 
-## Okta
+<AccordionGroup>
+<Accordion title="Okta">
 
 <Tabs>
   <Tab title="SAML">
@@ -77,7 +76,8 @@ Choose SAML or OIDC depending on your IdP, then follow the steps below for Okta,
   </Tab>
 </Tabs>
 
-## Google Workspace
+</Accordion>
+<Accordion title="Google Workspace">
 
 <Tabs>
   <Tab title="SAML">
@@ -114,7 +114,8 @@ Choose SAML or OIDC depending on your IdP, then follow the steps below for Okta,
   </Tab>
 </Tabs>
 
-## Microsoft Entra
+</Accordion>
+<Accordion title="Microsoft Entra">
 
 <Tabs>
   <Tab title="SAML">
@@ -149,8 +150,8 @@ Choose SAML or OIDC depending on your IdP, then follow the steps below for Okta,
       </Step>
 
       <Step title="Disable IdP-initiated login">
-        To prevent IdP-initiated login flows (which carry security risks), do not distribute the User access URL. 
-        
+        To prevent IdP-initiated login flows (which carry security risks), do not distribute the User access URL.
+
         Optionally, create a Conditional Access policy to block sign-ins that don't originate from your service provider.
       </Step>
 
@@ -160,3 +161,6 @@ Choose SAML or OIDC depending on your IdP, then follow the steps below for Okta,
     </Steps>
   </Tab>
 </Tabs>
+
+</Accordion>
+</AccordionGroup>