You enable OpenID Connect (OIDC) and add a provider under Instance Settings > SSO > OpenID Connect Provider. Now the default login display a link to OpenID Connect ...