Okta Says Hackers Stole Data for All Customer Support Users

Re:Okta Says Hackers Stole Data for All Customer Support Users by justin_oaks on Wednesday November 29, 2023 @12:25AM (#38455888)

If only it were that easy. Yes, you can run it as a docker container and self host.

But self hosting is non-trivial. You have to deal with DNS, TLS certificates, configuring Keycloak, data backups, and redundancy.

I set it up once so I could evaluate it. I may yet choose to self host but I'm not under any illusions that it's easier than paying for a service.

[ Parent | on HN ]

Re:Okta Says Hackers Stole Data for All Customer Support Users by unixhero on Wednesday November 29, 2023 @04:05AM (#38457166)

Dns, tls certs and data backups can be handled by something like cloudron.io (there are others too)

Edit: Elest will do it, https://elest.io/open-source/authentik

[ Parent | on HN ]

Re:Okta Says Hackers Stole Data for All Customer Support Users by dizhn on Wednesday November 29, 2023 @12:39AM (#38455950)

When you're evaluating solutions make sure to look into Authentik too. For my small company needs it was much much easier to understand and setup and it's only gotten better and more featureful.

[ Parent | on HN ]

Re:Okta Says Hackers Stole Data for All Customer Support Users by fostware on Wednesday November 29, 2023 @11:11AM (#38461226)

Authentik takes a little more to set up than KeyCloak, but the effort is well worth it when you go to configure TOTP. Authentik 2FA UX can be quite easy, similar to commercial products.

[ Parent | on HN ]

Re:Okta Says Hackers Stole Data for All Customer Support Users by Nextgrid on Thursday November 30, 2023 @01:12PM (#38476839)

There are plenty of valid concerns around self-hosting it, but I fear for the future of our profession if things like DNS, TLS certificates and backing up a database on a schedule are now considered hard.

[ Parent | on HN ]