SSO Callback closes connection (0 bytes sent by server); used logged out of impersonation previously

Yes. Nextcloud SSO only supports GET and not POST-based login. Our nginx proxy silently dropped the request since we had too many groups filling up the request header.

Our current workaround is manually patching the Plugin to not include groups:
https://github.com/soudis/discoursesso/issues/28#issuecomment-1165819892

We will switch to keycloak for authentication soon.