Use KDI as an third-party authentication provider: id.kdi.co