News for hackers. Stuff that matters.

A comment on What Is OIDC?. Parent comment

Re:What Is OIDC? by sebmellen on Friday December 22, 2023 @02:33AM (#38731868)
I cannot recommend https://ory.sh enough. Completely open-source and self-hostable auth. Great team too.
[ Parent | on HN ]
Re:What Is OIDC? by vintermann on Friday December 22, 2023 @03:46AM (#38732286)
I wonder why this got downvoted. I looked over the alternatives a while back, and I thought Ory looked the best too, with Keycloak as a good number 2.

I agree with the OP that it's good to not be dependent on SaaS for something as central as user management.

I do agree with the others that it's best to write as little as possible of security critical code yourself. However, integrating with a third party OAuth thing can be hard (and leave plenty of room for security fuckups) especially if you have anything implemented at all already user-wise.

[ Parent | on HN ]
Re:What Is OIDC? by junto on Saturday December 23, 2023 @04:53AM (#38742976)
Doesn’t Keycloak top out at 400-500 realms? If I was building a B2B SaaS application, that would be a concern?
[ Parent | on HN ]
Re:What Is OIDC? by mooreds on Friday December 22, 2023 @10:22AM (#38734968)
(I work for a competitor of Ory.)

That's awesome! Can you talk a bit more about what you love about their solution?

[ Parent | on HN ]