SSO / OIDC

It would be very useful to us to be able to use workflow with our existing SSO provider.

In our case that's either cloudflare zero-trust or entra ID.

Also self provision of the different workflow account types based on roles/groups would be really nice.