OpenID Connect (or SAML) as Delegated Authentication Directory

[Matthias Kannenberg]

I was wondering if there is a way to use external OpenID Connect Identity provider (or at least SAML provider) in place of the LDAP Delegated Authentication Directories.

I know that there are plugins available for the individual products to do preflight authentication (ask the IdP first, then query crowd; has to be configured for each product) but I'm looking for a solution where Crowd itself takes the authentication request (for example from Jira) from the user and then uses the Resource Owner Password Grant type from OIDC to verify the users credentials. That way it would only require one configuration of an OIDC provider.

[Arpit]

Have you got some solution for this ?