feat: add Cidaas provider (#2273)

* Add sensible logging flag to default setup for logger

* Fix default value flag for sensitive logging

* Remove sensitive logging changes

* Add Cidaas provider

* Update CHANGELOG.md

* Add required groups scope to defaults

* Fix tests

* Remove if block with protected resource

* Fix linting

* Adjust provider sorting, fixes

* Directly handle error return

Co-authored-by: Jan Larwig <jan@larwig.com>

* Use less deep nesting

Co-authored-by: Jan Larwig <jan@larwig.com>

* Directly handle returned error

Co-authored-by: Jan Larwig <jan@larwig.com>

* Pass provider options to Cidaas provider

Co-authored-by: Jan Larwig <jan@larwig.com>

* Add import for provider options

* Fix tests

* Fix linting

* Add Cidaas doc page

* Add Cidaas provider doc page to overview

* Fix link in docs

* Fix link in docs

* Add link to Cidaas

* fix provider order in docs and changelog position

Signed-off-by: Jan Larwig <jan@larwig.com>

---------

Signed-off-by: Jan Larwig <jan@larwig.com>
Co-authored-by: Teko012 <112829523+Teko012@users.noreply.github.com>
Co-authored-by: Jan Larwig <jan@larwig.com>
Co-authored-by: Kevin Kreitner <kevinkreitner@gmail.com>

docs/docs/configuration/providers/cidaas.md

@@ -0,0 +1,37 @@
+---
+id: cidaas
+title: Cidaas
+---
+
+[Cidaas](https://www.cidaas.com/) is an Identity as a Service (IDaaS) solution that provides authentication and authorization services. 
+It supports various protocols including OpenID Connect, OAuth 2.0, and SAML.
+
+However, Cidaas provides groups and their roles as hierarchical claims, which are not supported by oauth2-proxy yet.
+The Cidaas provider transforms the hierarchical claims into a flat list of groups, which can be used by oauth2-proxy.
+
+Example of groups and roles in Cidaas:
+
+```json
+{
+  "groups": [
+    {
+      "groupId": "group1",
+      "roles": ["role1", "role2"]
+    },
+    {
+      "groupId": "group2",
+      "roles": ["role3"]
+    }
+  ]
+}
+```
+
+This will be transformed into a flat list of groups:
+
+```json
+{
+  "groups": ["group1:role1", "group2:role2", "group2:role3"]
+}
+```
+
+Apart from that the Cidaas provider inherits all the features of the [OpenID Connect provider](openid_connect.md).

docs/docs/configuration/providers/index.md

@@ -10,6 +10,7 @@ Valid providers are :
 
 - [ADFS](adfs.md)
 - [Bitbucket](bitbucket.md)
+- [Cidaas](cidaas.md)
 - [DigitalOcean](digitalocean.md)
 - [Facebook](facebook.md)
 - [Gitea](gitea.md)