Juju doesn’t support OpenID today, and likely won’t in the next 6 months. However, it is very much the plan of Canonical to move to OpenID and a bunch of other authn and authz changes. It just isn’t something in the short term plan as we’re primarily focused on getting off of mongo.