---
enabled: "{{ lookup('sso_oidc_plugin') == 'user_oidc' }}"
required: true
mechanism: plugin
source: upstream
config:
  mandatory: true
  incompatible_plugins:
    - oidc_login
    - sociallogin