SSO
The SSO (or Single-Sign On) is handled by a Keycloak instance hosted on the server. The admin panel is available at https://clic.epfl.ch/keyclic and users can manage their profile at https://clic.epfl.ch/me.
For now, each user has a nextcloud_id attribute, to remain compatible with accounts that were created directly on Nextcloud. New users should have their username as nextcloud_id, with the sameformat {name}.{surname}. When there will be no remaining users with the nextcloud_id different than their username, you can update Nextcloud to use the username (preferred_username) and get rid of the nextcloud_id field.