One post tagged with "scim"

I run the information system of a simulated insurer on a six-node Kubernetes cluster, and the identity story is clean: Authentik is the single sign-on provider, every app is behind it, one login opens everything. That's the whole pitch of SSO — stop sprinkling passwords across forty apps.

So it was a little uncomfortable when, for the second time, I found myself standing up an LDAP server right next to Authentik. First for mail. Then, this week, for the ITSM. Twice I reached past the shiny OIDC door and opened an older, less fashionable one. The honest question a good engineer asks at that point isn't "how do I wire LDAP?" — it's "why does my beautiful SSO keep failing me here?"

The answer turned out to be the same both times, and it's worth writing down so I never re-derive it a third time.