Tracked as SYNCOPE-1018.

Requirements

Once this feature is implemented, it will be possible to log into the Admin Console, the Enduser UI (and any other Java EE web application) via OAuth 2.0.
A specialized use case is to allow new users to perform self-registration to Enduser UI (and to pre-populate some attributes) via their existing social accounts (Google, Facebook, Twitter, LinkedIn, ...).

An important requirement is to maintain all authentication / authorization aspects into the Syncope Core module.

Design

Implementation

For several reasons - including the need to introduce additional library dependencies - the ideal candidate for this implementation is a new extension.