Self-Sovereign Analytics: Running Matomo Behind Keycloak OIDC
GA4's default data retention is 2 months. Matomo with LoginOIDC and a pre-seeded plugin setting table gets you analytics you actually own.
OIDC
4posts
What My Self-Hosted Keycloak + oauth2-proxy Setup Taught Me About Azure Entra ID
I can reproduce every OIDC gotcha in my home lab before Microsoft support would open the ticket.
The 499 in Your Iframe: Race Conditions in OIDC-Gated Embeds
Matomo's signin returned HTTP 499 on first load and 302 on refresh. The difference was the browser's third-party cookie policy mid-redirect.
Mautic SAML Entity IDs Must Be URIs: A Debugging Story in Three Errors
Three stacked validators, one bare-string config, and an afternoon lost to SAML 2.0's dislike of non-URI identifiers.