Canonical SSO provider

Comment 2 for bug 824350

We've had to pause this work but the team will be back on it soon