News for hackers. Stuff that matters.

A comment on Okta Says Hackers Stole Data for All Customer Support Users. Parent comment

Re:Okta Says Hackers Stole Data for All Customer Support Users by agarren on Wednesday November 29, 2023 @12:09AM (#38455795)
I didn’t realize it until looking at it just a moment ago, but Auth0 is an Okta subsidiary. They don’t have a stellar record by themselves [0]. I guess that leaves Amazon? That’s not super encouraging.

[0] https://www.bleepingcomputer.com/news/security/auth0-warns-t...

[ Parent | on HN ]
Re:Okta Says Hackers Stole Data for All Customer Support Users by justin_oaks on Wednesday November 29, 2023 @12:34AM (#38455929)
Amazon Cognito is an attractive option for authentication since it has a good free tier and is relatively inexpensive even outside of the free tier.

The downside I ran into is that it doesn't support SAML SSO. It is only OAuth, OpenID Connect, and JWT.

[ Parent | on HN ]
Re:Okta Says Hackers Stole Data for All Customer Support Users by thephyber on Wednesday November 29, 2023 @12:51AM (#38456012)
As an auth backend to an app, perhaps, but the web login forms for Cognito had terrible UX (when we were using it). So terrible that we had daily customer-reported support tickets that we had no ability to fix (short of writing our own full UI).

Also, sharding user records into Cognito pools was a bit frustrating. Hopefully AWS has invested in fixing these issues.

[ Parent | on HN ]
Re:Okta Says Hackers Stole Data for All Customer Support Users by wg0 on Wednesday November 29, 2023 @01:14AM (#38456148)
Firebase and Supabase might also be good options for authentication. Cheaper with generous free Tier.
[ Parent | on HN ]