Thank you very much for the detailed response. My understanding is that it is possible to develop a third-party OD module to provide access to custom directory records. However, it’s not for the faint of heart. That would usually be the way to go for me, but since platform SSO is kind of the successor, it's not the best idea, yes. I had a quick first look at platform SSO and the tokens and claims already look quite a bit like OAuth / OIDC anyway, which would be even easier, if I can add my own custom IdP. I will dig deeper into this topic. Thank you very much, that was super helpful!