by Jon Bolton.
Probably better asked in the Authentication Forum
but... have you seen https://moodle.org/mod/forum/discuss.php?d=139507?