sso

Holm 是一个自托管的家庭主页/仪表盘产品，支持多用户通过现有 SSO 登录，各自拥有独立的应用、布局和壁纸，并提供统一搜索框集成 Immich、Jellyfin、Plex、Paperless、日历等多种服务。

Vercel is helping organizations like Klaviyo build agentic deployment platforms that connect AI agents and configure SSO, potentially transforming SaaS by enabling generated, tailored applications.

Security researchers discovered and disclosed vulnerabilities that allowed them to compromise OpenAI employees' accounts and access internal repositories through an exploit chain involving libheif and an SSO misconfiguration.

The author proposes the need for an internet agent identity provider similar to single sign-on (SSO) and suggests they might build it.

Introducing the open-source identity authentication/SSO project authentik, supporting protocols like OAuth2/OIDC, SAML, LDAP, and self-hosted as a replacement for commercial solutions such as Okta/Auth0.

The author explains the differences between SSO, OAuth, OIDC, and SAML, clarifying that SSO is a user experience, OAuth is for authorization, OIDC provides identity on top of OAuth, and SAML is an older enterprise protocol.

authentik is an open-source Identity Provider (IdP) for modern SSO, supporting SAML, OAuth2/OIDC, LDAP, RADIUS and more, designed for self-hosting from small labs to large production clusters, with an enterprise offering available.

Logto is an open-source auth infrastructure for SaaS and AI apps, supporting OIDC, OAuth 2.1, SAML, multi-tenancy, enterprise SSO, and RBAC.