Mautic plugin that signs users in through any OpenID Connect provider, with claim-based access restrictions and role mapping