Very cool. You can check out ollama for hosting local ai model.
OIDC is an extension of OAuth2 that focuses on user authentication rather than user authorization. Once OIDC authenticates a user, it uses OAuth2 specifications to perform authorization.
The easiest way to support oidc is thru using lib from your framework/language. All major language should already have oidc lib. Take a look for authelia which has pretty nice doc. We host lots of app and we don't want to login hundred times for each apps. It's nice to login once only and all apps play nice to each other ;)
Wait, breaking employer's AUP? More detail plz when you have time.