Rancher External Identity Providers: A Minimal SAML/OIDC Architecture for Multi-Cluster SSO
An architecture note on wiring Rancher 2.x to a SAML or OIDC identity provider: the minimal design, trust boundaries around etcd, verification steps, and the failure modes that actually bite.