Canonical SSO provider

Merge proposals dependent on lp://staging/~canonical-isd-hackers/canonical-identity-provider/token_tweaks

  1. token_tweaks
  2. Dependent merge proposals

lp://staging/~canonical-isd-hackers/canonical-identity-provider/token_tweaks has no merge proposals.