Canonical SSO provider

Merge proposals dependent on lp://staging/~facundo/canonical-identity-provider/support-caveat-v1

  1. support-caveat-v1
  2. Dependent merge proposals

lp://staging/~facundo/canonical-identity-provider/support-caveat-v1 has no merge proposals.