This plugin enables a CMS site to use an external OpenID Connect (OIDC) identity provider for user authentication, replacing the default login system. It is designed for administrators who need to centralize user access control and integrate their site with an existing corporate or cloud identity service.

• OIDC Single Sign-On: Users log in through a configured external identity provider, eliminating the need to manage separate passwords for the site.
• Automatic Role Assignment: Maps users to specific roles within the CMS based on group claims sent from the identity provider, simplifying permissions management.
• Replaces Default Login: When activated, the plugin disables the standard CMS login form, enforcing the use of the centralized identity provider for all access.
• Basic Configuration Interface: Provides an admin settings page to enter OIDC connection details and define the group-to-role mappings.
• Manual Fallback Option: Includes a documented method to disable the plugin via the database if login issues occur, serving as a break-glass recovery procedure.