<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Introduction on ownscale Documentation</title><link>/</link><description>Recent content in Introduction on ownscale Documentation</description><generator>Hugo</generator><language>en-US</language><atom:link href="/index.xml" rel="self" type="application/rss+xml"/><item><title>Getting Started</title><link>/docs/getting-started/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>/docs/getting-started/</guid><description>&lt;h1 id="getting-started"&gt;Getting Started&lt;a class="anchor" href="#getting-started"&gt;#&lt;/a&gt;&lt;/h1&gt;&#10;&lt;p&gt;Welcome to the ownscale documentation.&lt;/p&gt;&#10;&lt;p&gt;ownscale is a self-hosted control plane for Tailscale/Headscale. This&#10;section will grow to cover installation, configuration, and day-to-day&#10;operation.&lt;/p&gt;&#10;&lt;h2 id="sso"&gt;SSO&lt;a class="anchor" href="#sso"&gt;#&lt;/a&gt;&lt;/h2&gt;&#10;&lt;p&gt;ownscale federates login to a configurable upstream OIDC provider (Google,&#10;Okta, a self-hosted Dex instance, etc. &amp;ndash; see &lt;code&gt;auth.upstream_oidc&lt;/code&gt; in&#10;&lt;code&gt;config.yaml&lt;/code&gt;) and exposes its own OIDC provider at the bare base domain&#10;(&lt;code&gt;https://&amp;lt;base-domain&amp;gt;&lt;/code&gt;, where the admin panel and login also live) for&#10;each organization&amp;rsquo;s Headscale and Headplane containers. This documentation&#10;site itself lives at &lt;code&gt;docs.&amp;lt;base-domain&amp;gt;&lt;/code&gt;. You sign in with the upstream&#10;provider once, then downstream admin surfaces can reuse that ownscale&#10;session for single sign-on.&lt;/p&gt;</description></item></channel></rss>