Canonical SSO provider

Merge proposals dependent on lp://staging/~canonical-isd-hackers/canonical-identity-provider/return_to_match

  1. return_to_match
  2. Dependent merge proposals

lp://staging/~canonical-isd-hackers/canonical-identity-provider/return_to_match has no merge proposals.