3 ms·

Question for everyone saying that you should always outsource authentication, how do you handle the on-premise case? Or does this only apply to pure SaaS softwa

• tarruda 3y ago
  As long as the app only depends on the standard, you have some flexibility. For example, you can outsource authentication to a third party OIDC server on SaaS deployment and run a self hosted OIDC server like Ory Hydra for onprem deployments.
• jwnin 3y ago
  My read of this is 'don't write your own auth library'. If you want to rely on someone else to host it, or host it yourself, that's up to you and entirely fine. Different pros and cons of each approach; neither is perfect.