Canonical SSO provider

Merge proposals dependent on lp://qastaging/~elopio/canonical-identity-provider/fix1256365-python3

  1. fix1256365-python3
  2. Dependent merge proposals

lp://qastaging/~elopio/canonical-identity-provider/fix1256365-python3 has no merge proposals.