Enterprise & Institutional Organization Features — CircuitVerse

CircuitVerse currently handles every user and classroom in isolation with no concept of institutional ownership. This makes it impossible for universities to manage hundreds of classrooms, instructors, and students under one umbrella. This project introduces an Organisation layer to CircuitVerse. It adds a hierarchical structure where an Organisation contains Department Groups, which contain existing CircuitVerse classrooms. Role-Based Access Control enforced via Pundit gives each role: Org Admin, Group Lead, Instructor, and Student, exactly the permissions they need and nothing more. Single Sign-On via OpenID Connect lets students log in using their existing institutional email through Google Workspace or Microsoft Azure AD, with automatic org assignment based on email domain. Optional custom branding adds subdomain support and logo placement for institutional identity. Deliverables: 1. Hierarchical org structure: organisations, org_groups, memberships tables with full admin dashboard 2. RBAC via Pundit: four roles enforced at the server level 3. SSO via OIDC: omniauth-openid-connect with domain-to-org auto-assignment 4. Custom branding: subdomain routing and logo rendering (optional)