this feature Enabling direct authentication with an external OIDC identity provider is available GA in OpenShift 4.20. It would be useful to clarify usecase how they can fit together.