How complex is it to plug an external auth provider

pinging @DavidDarnes for visibility :wink: