Canonical SSO provider

Merge proposals dependent on lp:~facundo/canonical-identity-provider/no-caveat-in-refresh

  1. no-caveat-in-refresh
  2. Dependent merge proposals

lp:~facundo/canonical-identity-provider/no-caveat-in-refresh has no merge proposals.