NRAO staff can now use "Openid Connect" to log in to GitLab via Microsoft
So everything's in place except the endpoint definition change.