3 ms·
I'm glad this company is building an open-source and straightforward solution for SAML integration. I struggled to find the right solution for my product and tr
by coronapl 2y ago
I'm glad this company is building an open-source and straightforward solution for SAML integration. I struggled to find the right solution for my product and tried multiple libraries and services, including AWS Cognito.
Diving deep into OAuth and OIDC was crucial. Lesson learned: stick to the basics.
- noleary 2y agoGlad the project seems useful to you :) Any chance you'd share what went wrong with the other libraries/services? Curious to hear what mistakes we should avoid.
- coronapl 2y agoSure! I think Cognito is a decent solution. However, client-app integration can be tricky, and the documentation is quite ambiguous in my opinion. The recommended implementation option is Amplify, but I had concerns because it doesn't support HTTP-only cookies. I also experimented with NextAuth.js, but its documentation wasn't great, possibly because they're working on a new major version. I struggled particularly with supporting multi-tenancy with Microsoft AD. I noticed that you offer SAML over OAuth. I'm curious to try that out.
- noleary 2y agoYeah, we made SAML over OAuth available mainly for ease of use in NextJS. Drop me a note (email in HN bio)if you end up trying us out. Would love to see whether we're on the right track.