BIGNAMINI, ANDREAANDREABIGNAMINIURBAN, CristianoCristianoURBAN2026-04-172026-04-172026-03-27http://hdl.handle.net/20.500.12386/48084The Remote Authentication Portal (RAP) and the Group Management Service (GMS) are fundamental components of the IA2 (Italian center for Astronomical Archives) infrastructure, designed to provide centralized authentication and authorization services for the astronomical community. RAP acts as a Single Sign-On (SSO) provider, while GMS manages user permissions and group memberships. The integration of web applications with this ecosystem is typically achieved via the OpenID Connect (OIDC) protocol. However, the specific implementation of RAP requires certain architectural adjustments to ensure compatibility with standard libraries. For instance, typical OIDC flows rely on a userinfo_endpoint that may not be standard in the RAP environment, necessitating the extraction of user claims directly from the Identity Token (ID Token). This report presents a reference implementation and a “Starter Kit” for Django web applications. The solution utilizes the mozilla-django-oidc library with custom backend overrides to facilitate seamless authentication via RAP and efficient retrieval of user groups from the GMS API using OIDC Access Tokens.ELETTRONICOenTechnical reporthttps://doi.org/10.20371/INAF/TechRep/377