News for hackers. Stuff that matters.

A comment on Auth0 Down.

Re:Auth0 Down by AgentK20 on Tuesday April 20, 2021 @04:02PM (#26880732)
This type of incident is exactly why I dislike identity federation as a service. Yes it's difficult to get right, and you open yourself up to additional risk and technical complexity to do the federation yourself, but simultaneously how many businesses are currently completely down and just sitting on their hands waiting for Auth0's engineers to fix their systems?
[ Parent | on HN ]
Re:Auth0 Down by sk5t on Tuesday April 20, 2021 @04:37PM (#26881282)
While this protracted outage has prompted some plans to get rolling with a self-hosted Auth0 substitute, bear in mind that this can't address users wanting to sign in with Google, Microsoft, LinkedIn, etc., where you'll still depend on their authentication service to work correctly, not ban your client ID, and so on.
[ Parent | on HN ]
Re:Auth0 Down by TrogdorTheMan on Tuesday April 20, 2021 @04:50PM (#26881461)
Yup ^^ this. That and some dang help with managing security audits for our security team -.-. Just can't afford the man power to do it all.
[ Parent | on HN ]
Re:Auth0 Down by wjertyj on Tuesday April 20, 2021 @04:11PM (#26880885)
But how will you ever succeed if you don't outsource all but your core competencies while your core competencies simultaneously converge on banking/investment/midde-manning?
[ Parent | on HN ]