6 ms·
Show HN: Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0
- edude03 3y agoCongrats to the Ory team. We've been using it successfully at my company (self hosted) for the past ~2 years and it's been fantastic.
- aeneas_ory 3y agoFounder / core maintainer here - thank you, this means a lot :)
- nprateem 3y agoA great example of a website that completely fails to clearly explain how it's different from the competition.
- snowstormsun 3y agoI think their Github "About" text is quite clear imho. An open source identity service that can be an alternative to similar commercial ones like Okta, Auth0.
- 8organicbits 3y agoLinked from the home page: https://www.ory.sh/comparisons/ https://www.ory.sh/comparisons/
- mariusor 3y agoWhich requires viewers be authenticated to show anything. Bleh.
- edwinbalani 3y agoScrolling down from the "create an account" button, all the "Ory vs [thing]" links from that page open up just fine for me.
- meepmorp 3y agoJust click the comparison links, e.g., ory vs keycloak leads to: https://www.ory.sh/comparisons/ory-vs-keycloak/ https://www.ory.sh/comparisons/ory-vs-keycloak/ the chart may be hidden "below the fold," so scroll down.
- mariusor 3y agoAh I see. Terrible UI none the less. I gave up previously because having the user create button "above the fold" implied that an account was needed to view the comparison. SMH.
- meepmorp 3y agoOh, yeah, it's lousy design. I don't think it's intentionally deceptive, but it was still offputting.
- nullfield 3y agoIf this was all the way transparent about Keycloak they’d make it clear that Keycloak is the upstream for Red Hat SSO, which has support options from Red Hat/IBM and so on. It’s a little bit different model from theirs, but no less valid.
- aeneas_ory 3y agoI agree that we can do better here. Do you have a comparison in mind that you really liked?
- illiarian 3y agoFunny how you claim to support GDPR but your own site displays a non-compliant cookie banner.
- samtho 3y agoTheir cookie banner is provided by a 3rd party and I can’t see how it is non-compliant unless there is something I’m missing.
- capableweb 3y agoBecause it's a 3rd party, it cannot be non-compliant? Seems like it's 1 extra click to disallow compared to allow, so yeah, non-compliant. Should be exactly as easy to say yes as saying no. In this case it's not.
- pestaa 3y agoOverblown criticism like this give GDPR an undeserved bad rep.
- illiarian 3y agoIt's not overblown criticism. They advertise their product as GDPR-compliant, and yet their website uses dark patterns to trick people into allowing tracking, and is not GDPR-compliant. Do I trust them to be as diligent in their product? And yeah, what gives GDPR bad rep is exactly these kinds of dark patterns and other forms of malicious compliance by non-caring companies.
- smolder 3y agoIncorrect implementations give GDPR a bad reputation, though there are worse ones.
- aeneas_ory 3y agoFounder / project creator here. Ory Kratos has been in development since 2018 and is approaching version 1.0! If you have any questions about the project, tech, flows, or Ory as a whole I’m here to help :)
- 8organicbits 3y agoWhat's left before you'll be ready to release 1.0 and how will the project change once you've reached that milestone?
- quartzbox 3y agoCheck out the milestone on github: https://github.com/ory/kratos/milestone/15 https://github.com/ory/kratos/milestone/15 not sure if that is everything.
- sureglymop 3y agoIs this an alternative to Keycloak? One thing Keycloak supports is the ability to create multiple realms in order to use one instance for different groups of users and applications. Does Kratos support something like that?
- sn0wf1re 3y agoIsn't that aspect of Keycloak a carryover from the days when one VM held one instance of an application? These days containers are cheap and you can just spin up each "realm" in another container.
- sureglymop 3y agoJust because you can architecturally do that today, doesn't mean that you have to and that everyone does. I do run Keycloak in a container but I'm pretty sure spinning up a new instance for every realm would be more resource intensive than using multiple realms in the same instance. It's just a question of use case at the end of the day. In my use case I only need this for small internal tools so it's easier to just spin up one instance for me.
- zinclozenge 3y agoAre there any plans to support multi-tenancy? I understand that the current recommendation is to run multiple separate deployments, but will it be supported for a single deployment?
- aeneas_ory 3y agoThis will most likely stay a closed source feature for a while. Reason being that it makes an ElasticSearch situation more unlikely to happen
- 2mol 3y agoA while ago my team needed exactly this kind of auth solution, so the eng team reached out to Ory to clarify some technical questions that weren't covered by the docs. We were super enthusiastic about Ory. It looked solid, was open-source, and ticked all the right boxes. We got an immediate response by a very motivated sales person who insisted to be connected with management and refused to put us in touch with anybody technical. It was a pretty off-putting experience, because it basically presumed that our eng team wasn't the decision maker (it was). I know a lot of companies throw their sales people at you, wanting to get in touch with somebody higher in the org chart, but it's still a pretty insulting experience for a tech-driven organization. Needless to say we went with something else (not Auth0 either) and have been very happy.
- kazanz 3y agoWhat did you go with?
- aeneas_ory 3y agoHey, Founder here. Sorry to hear that. The sales process should be a net benefit for anyone involved. I’m really keen on fixing this (and had my fair share of bad sales calls too). Would you mind sending me a quick email to aeneas@ory.sh - I just want to figure out what needs to change for the org to become better. Appreciate it! I won’t sell you anything, promised ;)
- davidspiess 3y agoCan't share that experience. We are in the process of migrating from Azure B2C to ORY Network and had also some initial doubts if their products are a good fit for our enterprise company. Our company is three hours away from their office in munich, but they were willing to send us an experienced engineer to answer all of our questions. This was very much appreciated and helped us a lot. They also offer the possibility to purchase dedicated slack channel support.
- lykahb 3y agoTheir Slack workspace is quite helpful
- 3y ago
- nickreese 3y agoI want to love ory but honestly I have no idea how to integrate it like I can with supertokens. Literally looking to move from supertokens and have spent 4 hours trying to grok how to make the change. The docs are OK but how the products interconnect is super opaque.
- advaitruia 3y agoWhy are you looking to move from SuperTokens? -cofounder here
- aeneas_ory 3y agoHey there - a good place to get guidance is our large Slack community - slack.ory.sh - I’m also there and happy to help!
- mihaitodor 3y agoCool to see Kratos mentioned here! A friend spent a bit of time coming up with a miniature OAuth provider implemented in Benthos (https://www.benthos.dev/ https://www.benthos.dev/) and Bloblang (https://www.benthos.dev/docs/guides/bloblang/about/ https://www.benthos.dev/docs/guides/bloblang/about/). It is designed to serve a single OAuth client app and will generate JWT access tokens with limited lifetime: https://gist.github.com/disintegrator/0bd39879c437c4b3abb2779c661a6790 https://gist.github.com/disintegrator/0bd39879c437c4b3abb277...
- cyanf 3y agoOry’s killer feature is that it’s billed by DAUs not MAUs. It makes cost much lower and more consistent.
- cco 3y ago> It makes cost much lower and more consistent. I would have thought the opposite given that they'd be charging per user per day as opposed to an all you can eat in a given month for a single user.
- breadchris 3y agoI can’t believe that people use closed source auth solutions. As a security engineer, I am so thankful that Ory exists. If you can’t run your auth stack locally, your engineers will find work arounds for the inevitable pain/frustration due to some undocumented behavior that they can’t self service a root cause understanding.
- alphabetatheta 3y agoWhy are people still using Ory Kratos? It's still incredibly confusing documentation. Large fan of projects like: https://supertokens.com/ https://supertokens.com/ that focus on making authentication workflow implementation really easy.