Replacing Root Tokens with SSO: HashiCorp Vault + Authentik OIDC

If you’re using Vault’s root token for daily operations, you’re doing it wrong. I was too. Then I accidentally committed my .vault-token file to Gitlab.