Blog — notes from the identity plumbing.

Technical essays on self-hosted identity, SAML IdP internals, the economics of running your own SSO, and what we learned building a multi-tenant platform in Spring Boot. Written by engineers, read by engineers.

Latest

2026-04-21 self-host · SSO · OIDC · SAML

Self-hosting SSO in 2026 — a pragmatic guide

Every identity platform vendor tells you that self-hosting is hard. They are not wrong, but they are also selling you something. Here is what self-hosting an identity platform actually costs in 2026, which open-source options are real contenders, and the specific operational traps you will hit in month three.

Read →

What's next Upcoming posts: the economics of multi-tenancy at the database layer, writing a SAML IdP in Java with OpenSAML 4, building a payment-gateway abstraction that can route transactions to the cheapest provider. Subscribe via RSS or watch the repo for updates.