But devise is only single tenant and doesn’t offer a web admin view for managing the integration?
You certainly can write and maintain code to add multi-tenant sso, but since omniauth does not support any configuration storage, you have to add that yourself.