Add back-end guide

[m-mohr]

From recent discussion, we should give more guidance regarding back-end implementation, for example:

• Which OIDC flows need to be supported (from a recent telco) @jdries
• ... (to be continued)