Please Support OpenID/Connect For Login (Feature Request)

[ip6li]

Describe the bug

PH7 supports local login only for now. For integration with other services it would be very useful to support external login solutions like OpenID/Connect.

Expected Behavior

There should be an option to set up an identity provider e.g. a Keycloak realm and a certificate so PH7 behaves as follows:

• User calls https://my-ph7.example.com
• PH7 redirects to IDP (e.g. Keycloak instance)
• User provides credentials (or may be his client certificate) and get a JWT
• IDP redirects back to PH7, PH7 verifies JWT and accept logon if JWT is valid.