@biow0lf Thanks for your work on this! I can confirm that it works with my provider.

A few observations:

• It seems that OIDC_NAME cannot be set to an arbitrary value. After some failures, I guessed openid_connect and that worked.
• My provider recognizes a scope named groups, which, while not absolutely necessary, is useful. The app (errbit) errored and said it was an invalid scope.
• The ability to auto-create users would be valuable in my case.
• Using the email address of the user works, but it's not ideal, since they can change it. It would be better to use the uid (as you do with Google auth) and be able to customize the uid_field in the omniauth_openid_connect config.

None of these issuers is a blocker.