https://osmarpetry.dev/tags/oidc/Recent content in Oidc on Osmar PetryHugoen-USSat, 21 Mar 2026 00:00:00 +0000https://osmarpetry.dev/blog/sso-authentication-playbook/Sat, 21 Mar 2026 00:00:00 +0000https://osmarpetry.dev/blog/sso-authentication-playbook/<blockquote> <p><strong>Scenario.</strong> PixieShop is a B2B SaaS that sells enchanted toys to retail partners. Every partner logs in through their own corporate identity provider — some use Okta, others use Microsoft Entra ID. We never see a password. FusionAuth sits in the middle as our OIDC identity broker, and Auth.js v5 handles the Next.js session on the frontend. This playbook is the single place where we document how the whole chain works, from RSA key creation to federated logout.</p>