Hacker News Reader

I'm glad this company is building an open-source and straightforward solution for SAML integration. I struggled to find the right solution for my product and tried multiple libraries and services, including AWS Cognito.

Diving deep into OAuth and OIDC was crucial. Lesson learned: stick to the basics.

View on HN

Glad the project seems useful to you :)

Any chance you'd share what went wrong with the other libraries/services? Curious to hear what mistakes we should avoid.

Sure! I think Cognito is a decent solution. However, client-app integration can be tricky, and the documentation is quite ambiguous in my opinion. The recommended implementation option is Amplify, but I had concerns because it doesn't support HTTP-only cookies.

I also experimented with NextAuth.js, but its documentation wasn't great, possibly because they're working on a new major version. I struggled particularly with supporting multi-tenancy with Microsoft AD.

I noticed that you offer SAML over OAuth. I'm curious to try that out.

Yeah, we made SAML over OAuth available mainly for ease of use in NextJS. Drop me a note (email in HN bio)if you end up trying us out. Would love to see whether we're on the right track.

Reply on news.ycombinator.com