[martenson]

once merged this will rely on manual dependency handling until new social-core with cesid is released and dependency version in Galaxy's deps bumped

needs this:

python-social-auth/social-core@a8a33c6

and this:

diff --git a/lib/galaxy/authnz/psa_authnz.py b/lib/galaxy/authnz/psa_authnz.py
index 2faaf15358..d040fd8caf 100644
--- a/lib/galaxy/authnz/psa_authnz.py
+++ b/lib/galaxy/authnz/psa_authnz.py
@@ -113,6 +113,7 @@ BACKENDS = {
     "elixir": "social_core.backends.elixir.ElixirOpenIdConnect",
     "lifescience": "social_core.backends.lifescience.LifeScienceOpenIdConnect",
     "einfracz": "social_core.backends.einfracz.EInfraCZOpenIdConnect",
+    "cesid": "social_core.backends.cesid.CesidOpenIdConnect",
     "nfdi": "social_core.backends.nfdi.InfraproxyOpenIdConnect",
     "okta": "social_core.backends.okta_openidconnect.OktaOpenIdConnect",
     "azure": "social_core.backends.azuread_tenant.AzureADV2TenantOAuth2",
@@ -130,6 +131,7 @@ BACKENDS_NAME = {
     "elixir": "elixir",
     "lifescience": "life_science",
     "einfracz": "e-infra_cz",
+    "cesid": "cesid",
     "nfdi": "infraproxy",
     "okta": "okta-openidconnect",
     "azure": "azuread-v2-tenant-oauth2",