SSO / Magic Links

[dbauszus-glx]

We would like to make private instances more accessible to new users. This will require some form of authentication, but not authorization.

A user could sign in with single sign on, thus providing proof of a 'google', et al authentication.

Magic links are another option. We already have the modules in place to achieve this. A user will provide an email and receive a token sent to the email which provides timed [session] access.

The user email will be stored in the ACL allowing admins to assign roles to the user and block accounts to prevent misuse.