#Tag
Posts tagged "authentik"
The form supplied defaults my script never sent
Create an OAuth2 provider through Authentik's admin form and logins work; create it in the admin shell and every login comes back as a malformed request, because the form was ticking boxes the model leaves empty. Automation that writes underneath a form inherits the form's job, and a working object shows what that job includes without deciding it for the next app.
SSO is for people, not for machines
When an app grows a human face on an interface machines also depend on, one auth layer over everything either breaks the machines or quietly weakens the human door to let them through. The pattern that holds: a single identity-provider proxy in front of every human door, while machine paths keep their own scoped credentials - route by audience, not by app.
SSO is a perimeter decision, not a login box
Putting single sign-on in front of a fleet of self-hosted apps isn't about a nicer login screen - it's about where your trust boundary lives, and how it fails.