OpenID Connect RP Support

[fforootd]

We should Provide inbound Federation for OIDC

It would also be great to fix define a list of preconfigured providers which just need a Client-ID Client-Secret
IMHO these should be:

• Google
• AzureAD
• Github
• Gitlab
• OIDC Generic

Polices: TBD on which resource these can be applied

[hifabienne]

@adlerhurst @fforootd @livio-a please have a look at this. is something missing?

Idp Configuration:

• type: oidc
• name
• clientid
• client secret
• issuer
• scopes
• logo

We need a list of predefined IDP Configurations

LoginPolicy

• Allow Username/Password

Register:

• Allow Register (default: true)

Mfa:

• MfaRequired
• MfaLEvel
• Mfas:
  • OTP

ExternalIDP:

• Allow External IDP (default: true)
• External IDPs:
  • oidc: google
  • oidc: azure ad
  • ...

Organisation

• Scope: urn:zitadel:organisation:{orgid}
• GetLoginPolicy