<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Device-Flow on Ken Kitts</title><link>https://kenkitts.com/tags/device-flow/</link><description>Recent content in Device-Flow on Ken Kitts</description><generator>Hugo</generator><language>en</language><lastBuildDate>Fri, 07 Aug 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://kenkitts.com/tags/device-flow/index.xml" rel="self" type="application/rss+xml"/><item><title>A Toaster Can Log In Now, Apparently</title><link>https://kenkitts.com/posts/okta-device-flow-headless-login/</link><pubDate>Fri, 07 Aug 2026 00:00:00 +0000</pubDate><guid>https://kenkitts.com/posts/okta-device-flow-headless-login/</guid><description>The PKCE post covered the flow with a browser. This is the other branch: SSH into a headless box with no display, and Okta will happily let you approve the login from your phone instead. Same script, same cache, a completely different handshake — device_code, user_code, and a poll loop with opinions.</description></item></channel></rss>