Zitadel can use any string as username so that should not be too much to worry.
I think in this case with the eCert one would need to build a piece of software that verifies that authentication and creates adhoc users, these could then be used through the session api or the oauth token exchange.
To me only the eCert piece looks tricky all the other things should work out of the box.