News for hackers. Stuff that matters.
Re:Okta to Acquire Auth0 for $6.5B by vwpolo3 on Wednesday March 03, 2021 @05:58PM (#26336033)
There are already true open source alternatives on the horizon such as https://github.com/ory

It is about time for a new generation of identity systems in my opinion. This acquisition shows the risk of centralized, vendor locked-in services.

Re:Okta to Acquire Auth0 for $6.5B by ForHackernews on Thursday March 04, 2021 @03:46AM (#26340161)
https://www.keycloak.org/ is another open source option.

Compared to other choices, it's more mature and well-vetted because it forms the upstream for RedHat's SSO offering.

On the other hand, it's a big monolithic Java app, but they are making some moves to be more CNF-friendly: https://www.keycloak.org/2020/12/first-keycloak-x-release.ad...

Re:Okta to Acquire Auth0 for $6.5B by skeeter2020 on Thursday March 04, 2021 @01:38PM (#26346306)
If you are going to use keycloak it's worth making sure their mental model matches your own. Specifically we had issues with our model of multi-tennacy, each in their own realm vs. the keycloak idea of multiple tennants in a single realm. It caused some large performance and management issues.
Re:Okta to Acquire Auth0 for $6.5B by sam1779 on Tuesday March 09, 2021 @02:02PM (#26402414)
We're evaluating Keycloak. Would love to get some insights on your experience
Re:Okta to Acquire Auth0 for $6.5B by EtienneK on Friday March 05, 2021 @03:58AM (#26354569)
Can you please share where you heard the Keycloak preferred way for MT is multiple tenants per realm? I have never seen this before.
Re:Okta to Acquire Auth0 for $6.5B by EtienneK on Thursday March 04, 2021 @07:01AM (#26341333)
Yeah Keycloak is great. I've tried using other open source alternatives, but none are as full-featured and mature as Keycloak.
Re:Okta to Acquire Auth0 for $6.5B by eropple on Wednesday March 03, 2021 @06:26PM (#26336322)
Ory is really interesting but not, IMO, quite there yet. There are a bunch of Kratos features that aren't there but, once they are, I think it's a really compelling option.
Re:Okta to Acquire Auth0 for $6.5B by drakonka on Thursday March 04, 2021 @06:20AM (#26341075)
We used ORY fosite to write our auth service, and I have so far really enjoyed working with the lib. Feels like they aren't as focused on external users of the fosite lib though so much as their hydra solution which consumes it. The overall ORY ecosystem seems nice though, though I have not delved into it in detail past fosite.
Re:Okta to Acquire Auth0 for $6.5B by manigandham on Wednesday March 03, 2021 @07:50PM (#26337147)
Re:Okta to Acquire Auth0 for $6.5B by tor291674 on Friday March 05, 2021 @02:16PM (#26360845)
They just went private and you need to pay $12,000/year for unlimited clients.
Re:Okta to Acquire Auth0 for $6.5B by mamcx on Thursday March 04, 2021 @10:24AM (#26343540)
I try to like it but it have a HARD stand against multi-tenant deployment.

This is a major weak point of many solution, in special how automate it.

Re:Okta to Acquire Auth0 for $6.5B by msaidentity on Wednesday March 03, 2021 @09:16PM (#26337777)
If you're looking for next generation of identity solutions? https://magic.link is what everyone would need, provides decentralised identity, fair pricing and no vendor lock-in.

I love their startup pricing.

Re:Okta to Acquire Auth0 for $6.5B by sontek on Thursday March 04, 2021 @10:13AM (#26343367)
I hate this magic link flow. Its a major pain in my ass when I already have a password manager that knows how to login. Now I have to leave my browser and go to my e-mail client that will open a new tab even though I already have one open.
Re:Okta to Acquire Auth0 for $6.5B by atlgator on Thursday March 04, 2021 @12:19AM (#26338927)
I wish I knew python. I would kill for the backend developer job they have open. I love IAM.