Upon client initiation of a OIDC Authorization Code Flow for an ssl realm user, federation can be performed as shown below.
Whether federation to SSL Suppliers' IdP is SAML-based and/or established as OIDC federation has not been decided as such federation has yet to be established.