24 ms·
Okta to Acquire Auth0 for $6.5B
- switch007 6y agoHow does one migrate your users away from Auth0 seamlessly as possible (when you’re using their Database connection)? I seem to recall something about raising a ticket for an export including the hashes?
- brokenwren 6y agoYou can export everything via a support ticket. We have migration scripts you can use if you come over to FusionAuth or tweak them for any other platforms as well: https://github.com/FusionAuth/fusionauth-import-scripts https://github.com/FusionAuth/fusionauth-import-scripts
- agentdrtran 6y agoUnfortunate. Okta is working on their monopoly.
- bashmohandes 6y agoMicrosoft is in this space you know, it is by far the biggest player.
- marc__1 6y agoMore information on the ppt Auth0 200M ARR 50% Growth 120%+ Net Retention Rate https://investor.okta.com/static-files/83f1811e-2f92-4c08-a16d-76cae00f1255 https://investor.okta.com/static-files/83f1811e-2f92-4c08-a1... What a great acquisition. Congrats to both teams!
- capableweb 6y ago> What a great acquisition. Congrats to both teams! Great acquisition for those two, what about customers who always seem to lose when companies get acquired? The market now has less competition, people who were using Auth0 is eventually gonna have to modify their infrastructure because of this and things will become more unstable.
- ramraj07 6y agoHonestly as auth0 users we were mulling moving over to okta anyway. Auth0s offering has always been slightly rough around the edges and we end up slightly suboptimal implementations because of that.
- scrollaway 6y agoIf that were the case, Okta would not have acquired Auth0.
- mschuster91 6y agoTaking over a competitor is always a good idea, simply to reduce the amount of players you compete with. This is why Facebook gobbled up Instagram and Whatsapp.
- techrat 6y agoAcquisitions don't happen exclusively because a company is buying out someone who is better than them. Sometimes they happen so a company can buy out someone so they won't have the chance to become better than them and a serious competitor.
- capableweb 6y agoAnd for those in the back that don't know, using that as a reason for an acquisition is illegal and considered anti-competitive practice, hence you'll never hear a company publicly state that reason.
- deleted 6y ago[deleted]
- cat199 6y agobut you will hear: Sometimes they happen so a company can create synergies and improve the scope of their product offerings
- mooreds 6y agoThose are some killer numbers!
- Clewza313 6y agoReally? $6.5B is over 32x their current run rate, and that's projected revenue, not actual profit.
- f430 6y agowe are in a credit bubble after all
- ZephyrBlu 6y agoThose numbers are pretty insane though, especially the Net Retention.
- staysaasy 6y agoI'm with you that 32x feels insane, but these are crazy times and Okta presumably had to pay a premium to take Auth0 off the market. With those stats and a compelling story (developer tools) they were probably expecting a great IPO in this market. Assuming a 20% premium to take them off the market, 32x doesn't seem that crazy with many public companies trading at 25x or more. But yeah... it does feel a little bit like that moment where you go over the top of a roller coaster...
- lpage 6y agoFull details are in the investor release [1] [1] https://investor.okta.com/static-files/83f1811e-2f92-4c08-a16d-76cae00f1255 https://investor.okta.com/static-files/83f1811e-2f92-4c08-a1...
- cellar_door 6y agoStock is getting hammered in after hours on top of -6.89% today
- tootie 6y agoWow. These guys were basically 1 and 2 when it comes to enterprise auth/CIAM. It's great news for the businesses, but will likely only decrease competition in the marketplace. There's a ton of second tier competitors out there with plausible offerings who are probably going to start consolidating to stay alive.
- namdnay 6y agoWouldn’t 1 be Microsoft?
- femto113 6y agoAmazon/AWS and Google are big in the identity space too, so I think it makes sense that there's only room one real "third party" option.
- tootie 6y agoCognito and Firebase are bush league by comparison. They can do the basics well enough if you have the right integration engineers. Okta and Auth0 are light years ahead.
- femto113 6y agoThe difference is that Okta/Auth0 is never going to be the only piece of a solution. With AWS it's more than just Cognito, you have to consider IAM and SSO as part of the equation as well. And if you're a pure AWS shop the AWSness of Cognito (or its direct support in API Gateway, etc.) might make you prefer it to Okta or Auth0 regardless of feature parity. For Google the key asset is really Gmail/GSuite/Workspace, which is the primary identity provider for many, many organizations (and the sole identity provider for most of those). However kludgy Google's built in SAML stuff is there is a huge value in only needing to deal with one entity.
- pirate787 6y agoCognito is a nightmare and many things are broken. I lost 3 weeks in Feb. on a project trying to get it to work and just integrated Auth0 in 2 days.
- politelemon 6y ago> and integrated over time I'm reading too much into this sentence fragment and it fills me with fear. I smell breaking domain changes in the future. They can't allow the .auth0.com tenants to operate as-is forever, which means existing tenants will get grandfathered in and eventually forced off the .auth0.com domain onto okta's domains. I smell messy login sites in the future. I like Auth0's implementation of their Universal Login page, which didn't require JavaScript. In the quest for 'one single brand identity' someone will force a migration to Okta's login implementation instead. That will come with changing client IDs, client secrets, M2Ms and everything else needed in their setup. I might as well create a Jira ticket for this now.
- bena 6y agoSo you're not fond of them? I have limited exposure. We use them at my place of work for 2fa for our VPN. And an organization we work with uses it for authentication. But I haven't had to use them in anything I've developed.
- DaiPlusPlus 6y agoThe idea of outsourced identity is just so contradictory it makes my blood pressure shoot up when people sincerely suggest it. I'll make an exception for Office 365 / AAD when an organization has already got their userbase added, but after that I'd wager if an org is big enough to need their own federated authX, then they're big enough to deploy IdentityServer and be done with it.
- capableweb 6y agoWelcome to the future of the internet and web! Originally everyone was supposed to run their own servers and websites, but instead we have... The cloud? Hardly surprising that it didn't stop with that, and today you can basically build an app on 100% rented hardware/software via services. So if we're already outsourcing everything else, why not identity?
- oftenwrong 6y ago
- tomashertus 6y agoCongratulations to the entire Auth0 team. I admire their strategy on selling comprehensive auth/CIAM solution to the developer teams from all around the world!
- dyeje 6y agoDoes this rise to the level of antitrust scrutiny? Aren't these like the two biggest SSO providers?
- bdcravens 6y agoExcept that AWS and Google have their own offerings (and the I think these aren't SSO companies as much as Auth as a Service providers)
- motives 6y agoAzure AD is the biggest in the game by far in terms of SSO, stretching every vertical from education to investment banking.
- DaiPlusPlus 6y ago...only because of Office 365 though.
- softveda 6y agoAzure AD B2C for customer IAM is lagging way behind Okta/Auth0 etc. Sure AAD is great enterprise users or B2B but millions of customer login, branding, app experience B2C sucks.
- davewritescode 6y agoIf Cognito is the AWS offering you're talking about then it doesn't even begin to compete. It's really a terrible product and AWS has misled us about the roadmap multiple times specifically in relation to multi-region support. When AWS Cognito had it's outage in November, I was quite happy we went with Okta.
- bdcravens 6y agoI'm unimpressed with it as well, but I suspect antitrust officials have a different definition of "competition" than we do.
- sytringy05 6y agoWow, I wonder if this will create some space for a new competitor? I mean apart from these 2, who else are a serious option for rock solid SaaS IdP?
- erulabs 6y agoI recommend SuperTokens https://supertokens.io/ https://supertokens.io/
- daenney 6y ago> All other providers require an OAuth implementation even if you do not need SSO because of the way they’ve architected their solution. With SuperTokens, we’ve decoupled the functionality for different use cases, making it possible to only worry about the features you need. Eh? You’re either doing Oauth or you’re not? What have they decoupled?
- rishabhpoddar 6y agoFor example, if you require email / password auth without SSO, then we do not use open ID connect or any of the oauth flows - because those are not needed in a simple setup.
- SahAssar 6y agoNot having any 2FA makes it a non-starter for a lot of people.
- advaitruia 6y agoWe're working on it! Passwordless will be our next release in a few weeks and then 2FA comes next
- advaitruia 6y agoThanks for the Shoutout!
- 6y ago
- astuyvenberg 6y agoCongrats to the Auth0 team! Their product solves a really tricky, undifferentiated problem that I'm glad I don't have to solve anymore.
- ericlewis 6y agoI've used this a lot and it is stupidly expensive typically - hopefully this acquisition makes it more pervasive because they do a seriously great job at what they do!
- SavantIdiot 6y agostormpath > auth0 > okta > ?? Wonder who buys them next. This will be the third time I've updated my deployments.
- toomuchtodo 6y agoSalesforce?
- basch 6y agoWould be a smart move for Adobe as well.
- bonsai80 6y agoRandom safe bet seems to put to put Salesforce on the right right side of such a diagram, regardless of what the left side companies do. :)
- unclekev 6y ago> Wonder who buys them next Cisco or Salesforce
- ar_lan 6y agoI was wondering when this was going to happen.
- mooreds 6y agoReally? I am in this space and didn't see this at all. Auth0 (and other competitors) seemed to be growing quickly. I don't know why they wanted to sell; must be a really good offer + some synergies.
- fumar 6y agoOkta stock dropped 12% in after hours. I see the acquisition as a positive business decision.
- missedthecue 6y agoDropped because OKTA will issue an additional 21% of their outstanding stock to make the purchase, diluting existing shareholders
- basch 6y agoBut shareholders own an entire nother company now.
- djrogers 6y agoThe stock dropping only 12% after a 21% dilution reflects that 'the street' sees this as a net positive as well.
- conro1108 6y agoWouldn't that just mean that the delta between the dilution and the stock drop was 'the street's take on the "real" valuation of auth0?
- macintux 6y agoEffectively a dup: https://news.ycombinator.com/item?id=26334659 https://news.ycombinator.com/item?id=26334659
- dang 6y agoThat one was posted later, so I think it will be fairest to merge hither. (Item IDs are the definitive way to check that btw.)
- no-dr-onboard 6y agoOne auth to rule them all.
- invokestatic 6y agoThere's something about Okta that just scares me. If Okta is ever compromised, so are the thousands of companies that rely on it for IdP. How do companies mitigate this risk? Or do they?
- JMTQp8lwXL 6y agoWhat if AWS was compromised and every DynamoDB instance was accessible?
- invokestatic 6y agoI think the difference is that the scope of DynamoDB is limited. A breach in authentication could result in the complete compromise of a company.
- sebmellen 6y agoBut use of S3, for example, is not limited much at all. It is very dominant.
- londons_explore 6y agoI suspect that a breach of most companies AWS accounts would lead to a complete breach of that company. Somewhere in the mountains of data stored in an AWS account and all it's associated EC2 instances and backups on S3 will be credentials or information to thoroughly breach all other systems.
- codingslave 6y agoYou literally just made this up based on nothing
- tekno45 6y agoSomeone is able to bypass very strict security and even if I went with a different or self hosted solution, if I was the target i would be got.
- packetlost 6y agoOh no
- andrew_ 6y agoI hope this gives rise to another, smaller viable party outside of Amazon, Google, and Microsoft. Perhaps I'm jaded, perhaps hopelessly biased - but I can only see this as a net negative. Okta's open source packages receive a pitiful amount of attention (for example: https://github.com/okta/okta-oidc-js/issues?q=is%3Aissue+is%3Aopen+typescript https://github.com/okta/okta-oidc-js/issues?q=is%3Aissue+is%...) with forks almost becoming a requirement. Auth0 by contrast has been "on the ball" for a long time with their offerings. Okta's interfaces have been disjointed and inconsistent, confusing to users on a scale only surpassed by Jira, while Auth0's have always been pleasant to use from a user and developer perspective. From a personnel perspective, the two companies couldn't be more different, with Auth0 embracing a remote-first-class culture with creative interview processes, and Okta (pre-covid) being very much the opposite. I interviewed with both, and the process at Auth0 had me walk away with respect, while contrasted with Okta that left me reminded that tech hiring is broken. I'll hold my breath for a short time that Auth0 is allowed to operate independently. Sadly I feel it'll be inevitable that they're eventually swallowed up by the mothership.
- adamcstephens 6y agoRegulators should block this merger. Consolation is strangling capitalism in this country.
- jnwatson 6y agoNah. There's so little moat around the SAML/OAuth thing that there are already a half dozen startups working in the space, not to mention the offerings from the big cloud providers. I've just completed an Okta integration, and there simply isn't much "there" there. It doesn't even really have much of a network effect. They will be one player among 5 in the space in a couple years.
- turtlebits 6y agoAgreed, I found it hard to write integrations with Okta and ended up using Keycloak and integrating it as an OIDC client. I found Keycloak extremely easy to setup and work with.
- dang 6y agoWe changed the URL from https://www.okta.com/press-room/press-releases/okta-signs-agreement-to-acquire-auth0/ https://www.okta.com/press-room/press-releases/okta-signs-ag... to a third-party article. Usually though not always, corporate press releases are tepid devices whose purpose is as much not to say things as to say them, or at least not say them outright. So generally we prefer the best third-party article on a topic. https://hn.algolia.com/?dateRange=all&page=0&prefix=true&sort=byDate&type=comment&query=corporate%20press%20release%20by:dang https://hn.algolia.com/?dateRange=all&page=0&prefix=true&sor... (Cases like this are an exception to the 'original source' rule in https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html.)
- chromatin 6y agoHm, I now cannot find the other thread which had 40 some comments (but also linked to the corporate press release).
- dang 6y agoMerge in progress. Please stand by! Edit: Merge completed. Please resume reading!
- grinich 6y agoIf anyone's looking for an Auth0 alternative, come check out WorkOS! It's like Stripe for enterprise features, including SSO/SAML, Directory/SCIM, and more. https://workos.com/docs https://workos.com/docs (I'm the founder.) Edit: Here’s our launch last year: https://news.ycombinator.com/item?id=22607402 https://news.ycombinator.com/item?id=22607402
- btown 6y agoThis really looks amazing! I saw your post describing your product in relation to Auth0/Okta at https://news.ycombinator.com/item?id=26070302 https://news.ycombinator.com/item?id=26070302 and it makes a ton of sense. Many (most?) enterprise-facing startups don't start out that way, and it's painful in practice (and in principle!) to be power-sold to "lift" your existing users into a solution like Auth0, just to accept SAML logins for new users. And pricing per connection is infinitely more justifiable than pricing per user, especially in that context, especially with today's acquisition removing any downwards price pressure on that per-user pricing!!! I might reach out to you with some questions about our use cases - we're in early conversations with an enterprise client who uses Auth0 for their user management, and ideally we'd be able to use their Auth0 as an IDP for SSO into our existing Django application. Would also love to pick your brain on potential solutions for B2B2C use cases - your Admin Portal concept reminds me very much of a page I've written far too often in the past :) Feel free to reach me as well at btown.hn@gmail.com.
- grinich 6y agoYep, we can definitely support Auth0 as an IdP. It's a less common set up (versus IdPs like Okta or Azure AD) but still something we support. Feel free to send me a note. (Or anyone reading this too!) I'm mg@workos.com
- duncans 6y agoHad a quick look at your docs for integrating with Azure AD SAML https://workos.com/docs/integrations/azure-ad-saml https://workos.com/docs/integrations/azure-ad-saml and wondered why you don't make use of SAML metadata URLs that contain all this configuration? For example the signing certificates, ACS, Reply/ACS URL, EntityIDs are all in the metadata xml docs, so you could boil it down to: * Here's the SP metadata URL - upload it into Azure dashboard here ... * Grab the "App Federation metadata URL" from the Azure dashboard and paste it into WorkOS here ... (where your app can parse the XML and grab certs, URLs etc) And you're done.
- Black101 6y agoanother crazy valuation
- anderspitman 6y agoCentralized services gonna centralize. Something I've been thinking about recently is that a full web browser is a hard dependency of OAuth2-based systems. That's 20-30 million lines of code even for the simplest systems, even though you're basically just using the browser as a form renderer and a central space to store tokens. I feel like there's room for a simpler protocol designed to operate on HTTP plus a minimal UI language (maybe JSON-based) used to describe forms for granting access. This would make it much easier to develop for devices that don't have browsers. You could even make CLI interfaces for authorization flows.
- mooreds 6y agoYou might want to check out GNAP. I did an overview of it here: https://fusionauth.io/blog/2021/01/07/gnap-next-gen-oauth/ https://fusionauth.io/blog/2021/01/07/gnap-next-gen-oauth/ but you can also check out the spec here: https://datatracker.ietf.org/doc/draft-ietf-gnap-core-protocol/ https://datatracker.ietf.org/doc/draft-ietf-gnap-core-protoc... They are aware of the issues of the browser centricity of OAuth. It's definitely not the simpler protocol you describe, but it's one way to look at the future.
- mooreds 6y agoIf anyone's looking for an Auth0 alternative, come check out FusionAuth! It's been built from the ground up for developer experience with a distinct lack of jargon, amazing customizability, an API first approach and great docs. Plus, enterprise features too, including SSO/SAML, OIDC, and more. https://fusionauth.io/docs/ https://fusionauth.io/docs/ (I work at FusionAuth.)
- dec0dedab0de 6y agoDoes anyone else think its a horrible idea to outsource your companies authentication? Where I work we are migrating to Okta, and it blows my mind that anyone thinks it is a good idea.
- coderintherye 6y agoIm sure you could find people that think it is a bad idea, but most people including myself find it to be a good idea. What do you see to be horrible about it exactly?
- mooreds 6y agoThere was a big discussion on this a few weeks ago: https://news.ycombinator.com/item?id=25848349 https://news.ycombinator.com/item?id=25848349 (Disclosure, the post that sparked the discussion is on my company's blog.)
- sojournerc 6y agoI'd actually say the opposite. Any small start-up is not likely to have the expertise to implement auth in a 100% spec compliant, HIPAA certified, SSO compatible manner. It's not a de-facto BAD-THING to outsource skills outside of the niche of a business, and is likely more secure and thought-out than what would be created otherwise.
- oftenwrong 6y agoIt's no different than any other "build vs buy" decision. If you think you can provide your core offering AND implement complex authentication requirements half as well as a dedicated authentication-SaaS company, good luck. Businesses "buy" because it's the low-risk path.
- didip 6y agoHow do both of them make money?
- bootyfarm 6y agoRIP Stormpath RIP Auth0
- RazorX 6y agoOof, I really like Auth0 and was thinking of adopting them soon. Now it just seems like a huge risk. Why would I willfully walk into what will obviously be a migration nightmare and unknown pricing change for one of the central and critical pieces of my application (which should be boring to maintain)? Best to Auth0! I really hope you can maintain your company culture and excellence, but I can't risk my business on that now.
- nickysielicki 6y ago$6,500,000,000.00 for a company providing authentication APIs? Am I the only person left on earth that hasn't lost his mind?
- omni 6y agoCheck out Auth0's pricing page and it might start to make sense to you, they're outrageously expensive
- mooreds 6y agoOr the numbers in this comment: https://news.ycombinator.com/item?id=26334736 https://news.ycombinator.com/item?id=26334736
- TruthWillHurt 6y agoNot more expensive than Looker at ~$6000pcm. Also Looker is category leader whereas Auth0 is struggling to compete against cloud-provider supplied solutions (Cognito/Google Auth).
- sk5t 6y agoIf I recall okta’s monthly minimum is about 3k.
- hyperpl 6y agoI'm in the same boat and I use okta for work and have no clue what the hell it does or why this just can't be accomplished using open source.
- jpgvm 6y agoWhilst there certainly are great OSS solutions most big-ish corps already have Active Directory. You can setup ADFS to do SAML for SSO or you can use Azure AD which already has all that out of the box. If you aren't a big-ish corp then yeah, there are tons of OSS ways of doing IdP that fit your specific tastes etc.
- BerislavLopac 6y agoAt one startup I had to switch from Stormpath to Auth0 because the former was acquired by Okta...
- ablekh 6y agoGood for Okta and, potentially, for Auth0. But, most likely, not so good for current Auth0 users and future IdM users. I believe that decreased competition due to industry consolidation is not a good thing. I would rather see Auth0 choosing the IPO (or direct listing) route for an "exit" ...
- cheald 6y agoIf you want to own your identity management, consider Keycloak. It's mature, battle-tested, and works like a champ.
- advaitruia 6y agoCheald, SuperTokens isnt as mature as Keycloak but we make up for it in other ways (ease of implementation, frontend UI, hosted offering, docs and support). Would appreciate your consideration!
- corytheboyd 6y agoOh my, I hope the Auth0 free tier doesn't change because I just built out an integration with them for a project. Oh well, the end game was always to build my own auth, just... later, because it's such an annoying mountain of work.
- Azeralthefallen 6y agoI hate this. We moved from Okta a few years ago after we were basically received almost no actual real support for a bunch of issues, even though we were paying a premium cost. Nobody cares about issues on their Github, the kicker was a when we received a support response as suddenly something was no longer working after an update, we got help in the form of "We have no plans to address this anytime soon." when asking for an ETA. We ended up switching to Auth0, after we had a few calls with them. We shaved a decent amount off our costs with Auth0's Enterprise plan, and their webtask based rules worked. While the migration sucked for a bit, in the end we were much happier.
- theptip 6y agoCan second this, Okta requires you to "contact support" to turn on basic features like email customization, and even though I'm a paying customer, I was given a multi-week estimate (after waiting a week or two) for how long it would take to enable this feature. It's a flag in the web UI in Auth0. This did not fill me with confidence.
- davewritescode 6y agoI will 3rd this, this is my major issue with Okta in general. Other than that it's been pretty good for us.
- hangonhn 6y agoYeah current Okta customer and same experience as you. I was thinking of maybe going to Auth0 but well at least this news came out before we put any serious work into planning. sigh Auth0 at least has much better docs and libraries. It feels like Auth0 at least cared more.
- mc32 6y agoI’ve heard good things about Onelogin. I think Duo also seems to be another option.
- throwbacktictac 6y agoI've never dealt with Okta support but my support issue with Auth0 was top notch. However, their 'Rules' system for hooking into the Auth request is abstracted at the Auth0 account level rather than the individual app level. That makes it too easy to accidentally screw up all of the apps on an account.
- andy_ppp 6y agoI might be mad but auth0 really for $6.5bn, seems like a pretty simple problem solved in a quite mediocre way. I mean the common use case of an app+api+website login seems excruciatingly difficult to setup, surely something that did this by default and didn’t need configuration unless breaking out of this model would be preferable to the weirdness I’ve had on the 3/4 occasions I’ve set it up now.
- davewritescode 6y agoWe use Okta for a bunch of stuff and I do really love their product. My company did two rounds of evaluation and really loved Auth0 but their product was unfortunately too opinionated about some things which made it difficult to adopt. I don't know what this means regarding costs but for my place of business we saved money versus hiring people to operate/maintain the system.
- grinich 6y agoI would love to learn more about what you found too opinionated. (I work at WorkOS.) Can you shoot me a DM? I’ll “buy you lunch” aka send you a Doordash gift certificate as thanks :)
- crazygringo 6y ago> Okta, whose cloud software allows office workers to access all of their apps through a secure online service, said on Wednesday that it’s spending $6.5 billion to acquire rival Auth0. Okta’s shares plunged about 13% in extended trading after the announcement. Huh? Generally speaking, companies acquire other companies to become more valuable, not for their shares to go down. And even more so when the acquired company is a competitor. Why do investors think this is such a backwards idea, and why did the board approve an acquisition that investors appear to be rejecting? This is extremely unusual and the article provides zero explanation whatsoever.
- Clewza313 6y agoThe default explanation for the share price going down is that the market thinks they're paying too much. And let's face it, $6.5B is pretty toothy. (Remember when FB paid $1B for Instagram and everybody lost their minds?) But apparently Okta is also going to issue 21% new shares, diluting existing shareholders, so going down only 12% means they're actually kinda-sorta up 9%.
- fnord123 6y agoThe shares of the purchasing company always go down as the free cash available is being spent - or debt being taken on - on something at a premium. More explanation here: https://www.investopedia.com/ask/answers/203.asp https://www.investopedia.com/ask/answers/203.asp
- shubik22 6y agoI think it's actually quite common for the acquirer's share price to decrease following the announcement of an acquisition. (See e.g. this HBR article from 1999: https://hbr.org/1999/07/are-you-paying-too-much-for-that-acquisition https://hbr.org/1999/07/are-you-paying-too-much-for-that-acq....) One simplified reason for why this occurs is that the management of a company is who decides whether to make an acquisition. That management might think it's in their interest (prestige, compensation, etc.) to lead a larger, more important company. One way they can do that is by acquiring a competitor, and they might even be willing to overpay to accomplish that goal. The board of the company, often appointed by management, doesn't provide true oversight of the management's decisions. In other words, the incentives of management are misaligned with the incentives of investors. Management's response to this theory might be that the market (investors) doesn't understand their business, and isn't properly valuing the acquisition. I'm more sympathetic to the first view, but I believe there's research supporting both views.
- f430 6y agookay so short okta got it
- deleted 6y ago[deleted]
- TruthWillHurt 6y agoFarewell Auth0.. you had potential, shame you joined such a shady operation like Okta..
- aguynamedben 6y agoWe're using WorkOS to build Directory/SCIM and are very happy with it. They have a really good API for syncing enterprise directories (G Suite, Okta, SCIM, Azuer, etc.) and webhooks to get changes. It's easy enough to use even for internal applications, but we're using it to integrate customer directories with our product. We're also using it to do SSO for our product. It's much easier than trying to integrate with each of these systems.
- throwbacktictac 6y agoWow, I would not have guessed that Auth0 was that valuable. Part of the premium must be to keep it out of the hands of a worthy competitor.
- deleted 6y ago[deleted]
- mean_gene_1976 6y agoI am honestly not aware of either companies. From the outside looking in, the business model appears to be selling X as a service covered in buzz words. I mean enterprises check the box on these requirements. Now Hashicorp, they excite me.
- dataminded 6y agoI've done a couple of successful Auth0 projects. Okta has always been impossible to work with. Time to find another vendor.
- deleted 6y ago[deleted]
- yalogin 6y agoI wonder why the stock tanker after this is announced. From what I see they are the top 2 players in this space and so an acquisition should be good for business.
- pid_0 6y agoajfdoij23j3oijfnj112121212
- Elesant 6y agoIf anyone's looking for an Auth0 alternative, definitely check out: https://magic.link/ https://magic.link/ - easy plug-n-play auth, friendly-pricing for startups CEO here, ask me any questions!
- paranoidrobot 6y agoReally not a fan of this. Okta as a business are a pain to deal with, and unless you meet their minimum spend requirements (which are not told to you up-front) you're screwed. I've rolled out a ton of commercial products where we started with 1-2 users or a few units of compute, and on the basic little/no support options. When those products succeed, and we can demonstrate that not only does it meet our needs on paper, but it actually works, and whatever flaws that exist are not big enough to stop us wanting to use it more. AWS, Atlassian's Jira and Confluence, Sendgrid, Mailchip, Duo, and a bunch of others all started being used in orgs where this kind of thing is super low friction and easy to spin up, we plug in a credit card to get us off the ground. Okta? Well they'll tell you the pricing up-front, that's great - what they don't tell you is that after the trial period, you can't just give them a credit card, no you need to go through the sales process. It's not until you're talking to their salesperson that you find out you can't just start with a few licenses, no, you need to meet their minimum spend figure per month. Well, that idea was dead.
- mattchamb 6y agoI've seen the "we cant take credit cards and just start charging" fight play out on the other end. The reason was that the sales teams objected to their commissions being bypassed, so everything had to funnel through the sales pipeline.
- quickthrower2 6y agoFunny so they’d rather lose business than sales commissions.
- cphoover 6y agoA lot of people are saying they hate this, I understand why.. But perhaps the culture at Auth0 can infiltrate Okta instead of the other way around
- deleted 6y ago[deleted]
- polskibus 6y agoHow much value is there in okta/auth0 than there is in open source Keycloak?
- ffo 6y agoWe are building a cloud-native IAM over here https://github.com/caos/zitadel https://github.com/caos/zitadel It is written in Go and built around event sourcing for a great audit trail. We already support OIDC, Passwordless, RBAC and working on more features each day. For those who want to run it on-prem we have a kubernetes operator ready in the next few weeks who also manages the database (cockroach). We run our own service here https://zitadel.ch https://zitadel.ch with a free tier as well Feel free to engage with us on GitHub discussions.
- estsauver 6y agoCongratulations to the Auth0 team! We're happy customers, and we hope things don't radically change as they merge into Okta.
- randompi 6y agoOh man. Was planning on using Auth0. Never heard of Okta, but reading the comments in here has confirmed my suspicion of the company's core value. Now I'm having doubts.
- bashmohandes 6y agoOkta is an awesome company, there will always be doubters, do your own research, and don't trust anonymous chats on some internet forums, including myself.
- logronoide 6y agoI left Auth0 on Tuesday and one day later the company triple its value. Never thought I would be such a drag...
- jessaustin 6y agoYou should emphasize this in future negotiations. Companies will be falling over themselves to hire you and then fire you.
- supermatt 6y agoUrghh.. and to think I got rejected the season before Auth0 got accepted for exactly the same idea. Anyone have any tips on actually getting noticed at YC? Didnt even get past video pitch :/
- korginator 6y agoI only hope and pray that Auth0 doesn't give up on their attention to documentation, examples, and just making it easy to get going with their ecosystem. It took me a couple of hours to get a Spring Boot application to use Auth0 as an IDP and for ID federation to AzureAD, Google, Apple, and a few other IDPs. The documentation and examples are very comprehensive, and I like how they really get the day to day problems faced by developers. Getting anything working with Okta on the other hand took ages longer, to the point that we gave up on them to move to Auth0. In all, this acquisition is bittersweet for me.
- nojvek 6y agoAs just another average Joe/Jane, what can I do to influence anti-trust department that this merger is a bad idea for competition? It really does surprise me how many mergers are done purely for market capture reasons. The US Tech industry has a few bully behemoths who keep on getting bigger and a ton of smaller players.
- joemaller1 6y agoCloned the jwt.io site, just in case.
- throw1234651234 6y agoTragic. All Auth options are horrible and overpriced. From a presentation I did for a client a year ago for only 10,000 users: Off-the-shelf auth cost comparison • Okta: $20,000 / month • Auth0: $1,500+ / month • These are barebones services - any customization would cost extra • There is still a large implementation code when using these services Auth0 was worth using for midsize companies sometimes. Okta is not.
- death_by_ppt 6y agoThat doesn't seem to match the pricing on https://www.okta.com/pricing https://www.okta.com/pricing . It's more like $200/mo for the Developer tier, $3,500/mo for the Enterprise tier.
- throw1234651234 6y agoFrom the page you just linked "SSO List price $2 per user per month"
- Heririe 6y agoGood
- kall 6y agoIf anyone is looking for an alternative on the opposite end of the scale from enterprise, to add login to an MVP in a few days, I have been collecting newer services that go beyond passwords and Sign in with Google: Feather: https://feather.id https://feather.id Magic: https://magic.link https://magic.link Cotter: https://www.cotter.app https://www.cotter.app
- Dowwie 6y agoWhat are the most popular services that companies are paying for from these providers? I've built a lot of authentication and authorization technology, open sourcing very little so far.