6 ms·
What options for addressing the SSO problem would you recommend over SAML if one had the option? OIDC? Kerberos?
by korethr 5y ago
What options for addressing the SSO problem would you recommend over SAML if one had the option? OIDC? Kerberos?
- user5994461 5y agoOIDC for everything. Kerberos is limited to internal network and some very specific use cases (desktop auth). It's not competing. If the company has fully integrated Active Directory/Kerberos. On any desktop computer, it's possible to get an OIDC/JWT token for the current user with a single API call. It's transparent, the user doesn't need to enter their password because they are already authenticated on the machine. That is to say, no application ever needs to support Kerberos in the current age.
- mooreds 5y agoWe recommend OIDC, but support SAML because customers. We implemented our own SAML processing library, too: https://github.com/FusionAuth/fusionauth-samlv2 https://github.com/FusionAuth/fusionauth-samlv2 (We pay for valid security bugs.)