Added: - Self-signup can be configured for checking either "eduperson_entitlements" or "realm.roles" (e.g. EGI Checkin or AI4EOSC Access/Login) to allow self-registration - Use env setting REQUIRED_ENTITLEMENT or REQUIRED_REALM_ROLES to diff between OIDC AAI configs - Include env setting "FLASK_SERVER_SECRET_KEY" for mlflow>2.20 Changed: - Make OIDC_SCOPE configurable