Last working with old manual procedure
configurable profiles
working with Apache reverse proxy and OIDC auth module
No reverse proxy, works with LDAP.