OAuth Authentication

We’re running an instance of Pressbooks with the [hypothesis plugin](https://github.com/hypothesis/wp-hypothesis) installed and networked activated. We want to have the option of giving users one login to gain access to both Pressbooks and Hypothesis (when the hypothesis plugin is installed and activated for a book). We’re also looking at bringing Pressbooks into our Learning Management System via [LTI](https://github.com/pressbooks/pressbooks-lti-provider), and would love to be able to use a user's university credentials to create and provision these accounts. Following conversations I've had over the past several months with @jeremydean, @judell, and @robertknight, I have some questions about what we might be able to do regarding automatic provision of hypothesis accounts for users who access one of our books published with Pressbooks and the Hypothesis plugin when launched via LTI in a learning management system.

I'd love to see:

1) whether we can configure the hypothesis plugin for WordPress to implement a ‘third-party account’ using the reference implementation at https://github.com/hypothesis/publisher-account-test-site. If we’re successful with this, this may perhaps allow us to automatically create Hypothesis accounts when new Pressbooks accounts are created?

2) Set up our Pressbooks instance to allow SSO with a [Shibboleth plugin](https://kb.wisc.edu/cae/page.php?id=26315). This means that users would use their ‘NetID’ to create a Pressbooks user account, either at our public Pressbooks instance or when a book is launched in our Learning Management System via LTI. If step 1 were properly configured, they may also be able to generate a third-party hypothesis account at the same time.