I think it would be useful to allow configuring multiple, different, OIDC authentication sources, instead of the single one that the current configuration template allows.
Some sites implement a dozen of them so that users can choose the one they're more comfortable with, so I'm sure it would be useful; I'm not sure how I'd handle configuration via environment variables in that case, though.