worksmobile 관리화면 보완.

backend/internal/service/worksmobile_sync_service.go

@@ -33,6 +33,7 @@ type WorksmobileConfigSummary struct {
 	Enabled         bool             `json:"enabled"`
 	DomainMappings  map[string]int64 `json:"domainMappings"`
 	TokenConfigured bool             `json:"tokenConfigured"`
+	AdminTenantID   string           `json:"adminTenantId,omitempty"`
 }
 
 type WorksmobileTenantOverview struct {
@@ -115,6 +116,7 @@ func (s *worksmobileSyncService) GetTenantOverview(ctx context.Context, tenantID
 			Enabled:         WorksmobileEnabled(tenant.Config),
 			DomainMappings:  WorksmobileDomainMappings(tenant.Config),
 			TokenConfigured: worksmobileDirectoryAuthConfigured(),
+			AdminTenantID:   strings.TrimSpace(os.Getenv("WORKS_ADMIN_TENANT_ID")),
 		},
 		RecentJobs: jobs,
 	}, nil

backend/internal/service/worksmobile_sync_service_test.go

@@ -56,6 +56,26 @@ func TestWorksmobileSyncServiceRejectsAliasLocalPartAlreadyUsedByOtherUser(t *te
 	require.Empty(t, outboxRepo.created)
 }
 
+func TestWorksmobileSyncServiceOverviewExposesAdminTenantIDForPasswordManageLink(t *testing.T) {
+	t.Setenv("WORKS_ADMIN_TENANT_ID", "works-tenant-1")
+	root := domain.Tenant{
+		ID:   "root-tenant",
+		Slug: HanmacFamilyTenantSlug,
+		Name: "한맥가족",
+	}
+	service := NewWorksmobileSyncService(
+		&fakeWorksmobileTenantService{tenants: map[string]domain.Tenant{root.ID: root}},
+		&fakeWorksmobileUserRepo{},
+		&fakeWorksmobileOutboxRepo{},
+		nil,
+	)
+
+	overview, err := service.GetTenantOverview(context.Background(), root.ID)
+
+	require.NoError(t, err)
+	require.Equal(t, "works-tenant-1", overview.Config.AdminTenantID)
+}
+
 func TestCompareWorksmobileGroupsUsesOrganizationsAndBarongroupChildCompanies(t *testing.T) {
 	parentID := "root-tenant"
 	root := domain.Tenant{