Sonarqube themselves only support SAML for some reason and the approach is documented here. When I tried this, it did not work and generated various errors.
The community has developed an OIDC plugin, can be installed from the marketplace and allows authentication via OIDC, which works pretty much out of the box using the settings below.
