Best approach to SSO with Ghost?

I’ve noticed some updated apps (SAML and OpenID) and I’m curious about the best approach to enable SSO within Discourse and Ghost.

At the moment, I’m searching for a 2-way-sync solution to maintain consistent tier levels between Ghost ‘tiers’ and those on Discourse (triggered by Strapi subscriptions, which should also be compatible with Discourse subscriptions).

There’s a free app available on GitHub that I’d like to try, but it transfers the user base to Ghost, and I currently have more confidence in the Discourse team for handling that aspect (no offense to the Ghost team, but your specialty is static content).

I can confirm that Discourse works well with Authentik but not Ghost because it lacks proper OpenID integration.

I decided not to use their user database and stay with Authentik and Discourse.