Using Debian Salsa as identity provider
Debian Salsa supports OpenID Connect and plain OAuth 2.0 as authentication protocol.
Information for service admins
Every user on Salsa can setup own applications and use them for authentication purposes. There is however no support yet for applications on group level.
More information exists in the GitLab upstream documentation for OpenID Connect and OAuth.
Claims
Salsa provides the same claims as listed in the GitLab documentation.