Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Why run a copy and not authenticate against the remote Ory instance?

That may not be accessible, as the computer may be in an offline setting

Although I'd be keen to hear how that could solve the problem

Well, then you would get a session from the service that the app could use

Hmm, but how does that factor in to not duplicating the box login?