Two-phase SSRF via configurable provider URLs in SaaS integrations (SSO OIDC issuers, Git server base URLs, OAuth hosts). Use when target has configurable SSO, VCS, OAuth, SAML, SCIM, or data warehouse integrations where admin stores a URL and a separate flow triggers a server-side fetch.
