Retrieve SSO using scope openid. Maybe refactor the scopes so it will be more understandable what data you get back from Orange based on the scope.