[xyst]

I like this solution, thanks for sharing. Just need to swap it with my own OIDC compliant federated authentication server.