#single sign-on
32 related articles
·4 min
Guide to Securely Exposing Self-Hosted Services: From Tailscale to Defense in Depth
Complete guide to securely exposing self-hosted services: Tailscale zero-exposure, reverse proxy setup, Cloudflare Tunnel, Authelia auth gateway, server hardening, and 3-2-1 backup strategy.
Read more →
·3 min
Warpgate 0.27 Released: Open-Source Bastion Host Adds RDP/VNC and Cluster Support
Warpgate 0.27 adds transparent RDP/VNC proxy, OTP/SSO integration, cluster scaling, and TLS hot-reload. A FOSS alternative to Teleport requiring no agents or clients for unified privileged access.
Read more →
·2 min
Basedash Audit Logs Explained: Compliance and Security Tracking for an AI-Driven BI Tool
Basedash launches native audit logs tracking AI queries, user actions, and config changes with SIEM integration and custom retention for enterprise BI compliance.
Read more →
·1 min
Goodbye Grafana: A Practical Migration Guide to the Lightweight Homelab Monitoring Stack Beszel
A complete guide to migrating from Grafana+Prometheus to the lightweight Beszel monitoring stack, covering motivation, resource savings, trade-offs, and ideal use cases for Homelab users.
Read more →
·1 min
Goodbye Grafana: A Practical Migration Guide to Beszel, a Lightweight Homelab Monitoring Stack
A complete guide to migrating from Grafana+Prometheus to Beszel lightweight monitoring, covering motivations, resource savings, trade-offs, and ideal use cases for Homelab users.
Read more →
·3 min
The Curse of the SSO Tax: Open Source Projects Shouldn't Lock Security Behind Paywalls
Exploring the SSO Tax in open source: why locking SSO and OIDC behind paywalls betrays user security, and how maintainers can monetize sustainably without sacrificing safety.
Read more →
·3 min
The Scourge of the SSO Tax: Open Source Projects Shouldn't Lock Security Behind Paywalls
An in-depth look at the SSO Tax in open source: why locking SSO and OIDC behind paywalls betrays user security, and how maintainers can monetize sustainably without sacrificing it.
Read more →
·3 min
AI Agent Authentication and Authorization: Core Analysis of the IETF Draft and Security Best Practices
Deep analysis of the IETF Internet-Draft on AI Agent authentication and authorization, covering identity attribution, delegation chains, least privilege, OAuth 2.0 extensions, and MCP integration.
Read more →
·6 min
Securely Exposing Self-Hosted Services via VPS: Architecture & Practical Guide
Learn how to securely expose self-hosted services via VPS using WireGuard tunnels, Pangolin, and reverse proxies — enabling client-free access to Plex, Immich, and more while hiding your home IP.
Read more →
·2 min
Segue: A Deep Dive into the Cross-Platform AI Conversation Context Migration Tool
Segue is an AI context migration tool that uses short handles to seamlessly transfer conversation context across ChatGPT, Claude, and other AI platforms, solving the context-reset problem when switching tools.
Read more →
·2 min
Segue: A Deep Dive into the Cross-Platform AI Conversation Context Migration Tool
Segue is an AI context migration tool that uses short handles to seamlessly transfer conversation context across ChatGPT, Claude, and other AI platforms, solving the cross-platform context reset problem.
Read more →
·2 min
Linkwarden 2.16 Released: The Permanent Archiving Powerhouse for Open-Source Bookmark Management
Linkwarden 2.16 released with major Web and mobile updates. This open-source collaborative bookmark manager supports permanent link snapshots and self-hosting, adding self-signed cert support, quick search, and modern UI.
Read more →
·7 min
Enterprise AI Agent Security Isolation and Memory Design: NanoClaw Founder Breaks Down Real-World Lessons
NanoClaw founder David Boyd breaks down the core engineering of enterprise autonomous Agents: a triple security isolation model, LLM Wiki memory design, and the real-world path from personal Agents to team-scale deployment.
Read more →
·3 min
Enterprise RAG Knowledge Isolation in Practice: Physical Isolation vs. Adaptive Soft Boundaries
A deep dive into two enterprise RAG knowledge isolation strategies: physical isolation vs. adaptive soft boundaries — covering metadata tagging, dynamic user-profile filtering, hybrid retrieval architecture, and data quality best practices.
Read more →
DocuSeal: An Open-Source DocuSign Alte…
·2 min
DocuSeal: An Open-Source DocuSign Alternative — A Deep Dive into Self-Hosted E-Signature
DocuSeal is an open-source, self-hosted e-signature tool built with Ruby — a strong DocuSign alternative. Learn its features, architecture, and deployment options.
Read more →
·2 min
Pocket ID Achieves Official OIDC Certification and Adds OAuth 2.0 Authorization Support
Pocket ID v2.10.0 achieves OpenID Connect Certified™ status and adds OAuth 2.0 Resource Servers & Scopes. A lightweight, Passkey-first SSO solution for homelab self-hosting.
Read more →
·3 min
APA: A New Enterprise-Grade Automation Approach Merging Agents with RPA
APA (Agentic Process Automation) merges LLM agents into RPA, supporting natural language, operation manuals, and video recording to generate scripts—paired with financial-grade security and three-layer protection for enterprise automation.
Read more →
·4 min
Dify Getting Started: A Complete Guide to Building AI Workflows Without Code
A complete guide to Dify's core features and 1.8.0 deployment. Covers 5 app types, Docker setup, Workflow vs Chatflow differences, and RAG knowledge bases for beginners.
Read more →
·2 min
Tailscale: Build a Secure Private Network Effortlessly with WireGuard
Tailscale is a modern networking tool built on WireGuard that automates key exchange, node discovery, and routing. Supports SSO and 2FA. Perfect for remote work, self-hosting, and multi-cloud setups.
Read more →
·7 min
Dify Enterprise System Integration in Practice: Building a Project Management AI Copilot with Workflows
Using a project management system as an example, this article details how to use the Dify low-code platform to achieve AI-powered integration of enterprise internal systems through interface capture and workflow orchestration.
Read more →