Feature Request: oAuth 2.0 / OpenID Connect

[pozylon]

More and more of our customers use IAM tools like Keycloak, Zitadel, Auth0 etc. That way they can have all their users across various tools in one user database and provide modern ways of login (Passkeys, TOTP, SSO through Azure...).

I know there is tools for PHP that do this well, for ex. https://github.com/jumbojett/OpenID-Connect-PHP

Is it possible to add this to Cockpit Pro? Frontend-wise It's basically a button on the login page but on the backend you'd propably need to add some API endpoints (/login and openid return).

Optionally: It would be awesome to map roles of users so I could control in IAM which user can do what in cockpit, so I could for example set the role "com.getcockpit:editor" and it should translate to a "editor" role configured in Cockpit.