News for hackers. Stuff that matters.

A comment on Show HN: Open-source IAM Ory Kratos v1.0 with Passkeys, MFA and multi-region. Parent comment

Re:Show HN: Open-source IAM Ory Kratos v1.0 with Passkeys, M... by samstave on Thursday July 13, 2023 @01:52PM (#36713272)
Just also curious, how difficult/complex would be passkey/password/access recovery with what apppears to be so many layers of auth?
[ Parent | on HN ]
Re:Show HN: Open-source IAM Ory Kratos v1.0 with Passkeys, M... by scarmig on Thursday July 13, 2023 @02:29PM (#36713913)
No more complicated than usual, as there's separation of concerns. You'd have your IdP, which provides authentication and account management. The IdP then integrates with an application or service using some authentication protocol (OIDC, SAML, LDAP, etc), so downstream only relies on the protocol.

It could get messy if you had some identity-aware proxy in front of your IdP.

[ Parent | on HN ]