Hacker News Reader

Comment by sytringy05 | Hacker News Reader

Wow, I wonder if this will create some space for a new competitor? I mean apart from these 2, who else are a serious option for rock solid SaaS IdP?

View on HN

For Enterprise SSO, the market that Okta focuses on, Azure AD is by far the biggest player. They get their foot in the door at companies with Office365, which then makes it a really easy move for companies to consolidate all SSO there. Other responses are commenting on features, but AAD is everywhere.

The only other hosted solution (other than Okta and AAD) I have ever seen at my clients is Ping. In comparison, all the other players are nowhere as nearly established.

Come try WorkOS! http://workos.com/

https://www.keycloak.org/

Come on over to the FusionAuth! The water is great! - https://fusionauth.io

I recommend SuperTokens https://supertokens.io/

> All other providers require an OAuth implementation even if you do not need SSO because of the way they’ve architected their solution. With SuperTokens, we’ve decoupled the functionality for different use cases, making it possible to only worry about the features you need.

Eh? You’re either doing Oauth or you’re not? What have they decoupled?

For example, if you require email / password auth without SSO, then we do not use open ID connect or any of the oauth flows - because those are not needed in a simple setup.

Not having any 2FA makes it a non-starter for a lot of people.

We're working on it! Passwordless will be our next release in a few weeks and then 2FA comes next

Thanks for the Shoutout!

There are lots of competitors, all at varying levels of sophistication and targeting a wide variety of markets. Lots of them mentioned in sibling threads, but I work at another one that is really dev focused:

https://fusionauth.io/

> ...who else are a serious option for rock solid SaaS IdP?

Google Cloud (Firebase Auth), AWS (Cognito), and Azure (Active Directory) are as rock-solid as they come.

FusionAuth.io, userbase.com, and clerk.dev come to mind as well.

Azure Active Directory leaves much to be desired.

If it was not a MS product it would struggle to attract a market.

How so? I'd argue they're far ahead of the competition in features.

Except for all the basics like RBAC with multiple roles, JWT modification, simple MFA, etc.

AAD implements SAML, OIDC, SCIM, LDAP, Kerberos, FIDO2 and more. Even if it was not a Microsoft product, it would have better non-proprietary interoperability than most other SSO platforms.

Cognito is a joke. It’s full of bugs, the hosted UI doesn’t support half the features and -- based on the change velocity I’ve seen over the last three years —- it is desperately under-resourced by AWS. The new releases always seem to be small changes (like adding a new OAuth provider) but never fixes for the major bugs.

Anyone who's used cognito knows it's a joke compared to the others.

ory.sh

Reply on news.ycombinator.com