Give your AI agent its own identity
An AI agent using a copy of your API key is invisible in the audit log. Give it its own OIDC client in authentik, scope its token, and revoke only that one.
#oidc
Filtering by topic #oidc · clear
Put any app behind SSO with oauth2-proxy
Forward auth puts an app that has no login behind your OIDC provider. Wire oauth2-proxy into nginx or Traefik, and avoid the cookie and redirect traps.
The SSO tax in self-hosted software
Open source apps that keep OIDC and SAML in a paid tier: why maintainers price it that way, and the checklist to run before you install anything.