Canonical SSO provider

Merge proposals dependent on lp://staging/~canonical-isd-hackers/canonical-identity-provider/token-ui-fix

  1. token-ui-fix
  2. Dependent merge proposals

lp://staging/~canonical-isd-hackers/canonical-identity-provider/token-ui-fix has no merge proposals.