Single signon between Oathkeeper+Kratos and portainer We have oathkeeper+Kratos performing single signon to grafana, however grafana explicitly supports authenticating using a JWT and JWKS. We would like to do SSO to Portainer and MinIO which do not explicitly support this but which do support OpenID connect. I apologise for my lack of understanding but is the JWT generated by oathkeeper's token_id mutator exactly the same as the token created at the end of an OpenID/Oauth 2.0 exchange? Should I be able to get portainer to accept the token generated by the token_io method? I am happy to keep trying and reading documentation, I just want to know if what I am trying to do is possible or just silly.