OpenID Connect relying party primitives and plugin extensions for Better Auth Ruby enterprise SSO. Pair with better_auth-sso for provider management or require directly for OIDC-only integrations.