Shared Signals Framework (SSF)

I would like to use Authentik for connections with Apple Business Manager. But they expect OIDC providers to support SSF.

I think it would make sense to integrate SSF into Authentik:
https://sharedsignals.guide

Alternatives, that I didn't try: host an SSF service trough other tools; and even selfhosting another tool might be an option. I just tested it my Apple account and an external SSF provider and it did work then.

https://openid.net/wg/sharedsignals/

https://openid.net/specs/openid-sharedsignals-framework-1_0.html

Start by reading the Shared Signals Framework guide and the OpenID SSF 1.0 specification linked in the issue, then investigate how Authentik currently handles OIDC providers. The issue names no files or tests and does not define the required integration boundary; done would require an agreed SSF implementation that works with Apple Business Manager.

Written by the indexing model from the issue text.