4 ms·
Quick question: how does this differ from keycloak? Are they competing products or do they work fundamentally differently?
by revel 4y ago
Quick question: how does this differ from keycloak? Are they competing products or do they work fundamentally differently?
- vbezhenar 4y agoOne difference is that Keycloak has some UI which you can even customise for your installation. Fundamentally I guess they're similar, Keycloak is more mature but more Java.
- rad_gruchalski 4y agoKeycloak is more feature packed than the Ory stack. Ory is thinner than Keycloak. Keycloak is heavy to learn but once you know it, everything is easy. It’s amazingly configurable. It has everything: saml, openid, federation, roles, groups, mappers, extensibility, authorisation services, configurable flows, … What I like about Ory: thin components. Starts really fast, go binaries with zero dependencies. What I didn’t like: extension points are inflexible and everything is a http call. Integration is a pita. Say you have hydra and kratos. You want kratos login but then use hydra tokens to fetch data from keto. Good luck writing the glue code. Kratos has two things Keycloak could borrow: json identities with schemas and external ui pluggability. If Keycloak had those two, I’d never look back.