Authentik
1 post on Authentik: design decisions and how-to guides from small infrastructure estates run on a very low budget.
Two roots of trust: Authentik for people, Vault for machinesPeople and machines have different lifecycles, so they get different roots of trust. The protocol ladder, the login policy, the credential shapes, and the one rule that neither root may depend on something it protects.