4 ms·

https://goauthentik.io/#comparison https://goauthentik.io/#comparison They have an enterprise version now (mostly for support and bleeding edge features that l

by dizhn 11mo ago

https://goauthentik.io/#comparison https://goauthentik.io/#comparison They have an enterprise version now (mostly for support and bleeding edge features that later make it into the open source product.) It's pretty easy to self host. I have been doing it for a small site for years and I couldn't even get any other open source solution to work. They are mostly huge with less features.

fheisler 11mo ago
Thanks for the mention! (Authentik Security CEO here.) We've become something of Okta migration experts at this point... Cloudflare moved to us a couple years back after they had to be the ones to let Okta know it'd been breached yet again. [1] [1] https://blog.cloudflare.com/how-cloudflare-mitigated-yet-another-okta-compromise/ https://blog.cloudflare.com/how-cloudflare-mitigated-yet-ano...
- dizhn 11mo ago
  Cloudflare??? Damn. that is HUGE! Congratulations. You guys have a super solid product full of features and a decent founder. Maybe enterprises don't care about my favorite feature but it makes securing EVERYTHING a breeze. Embedded proxy! That is GOAT.
gnaman 11mo ago
No provider has been able to match Auth0 actions unfortunately. Auth0 allows you to execute custom code at any point in the auth lifecycle and allow/deny based on that or enrich user attributes. Super useful when you have a legacy system that is hard to migrate away from. If anyone has any recommendations I'm all ears
- dizhn 11mo ago
  I am not qualified to say whether Authentik can do all of what you need but it does allow custom python code in a lot of places. Perhaps you can ask whether what you need is available directly. They are very active in Discord.
  - risson 11mo ago
    (authentik maintainer here) It does! Also, not only in the authentication process, but also during individual authorization flows, and in a few other places as well, like when a user edits their settings, or whenever an event (basically whenever something happens in authentik) but that's more a reactive process than inline
- mooreds 11mo ago
  I work for FusionAuth. We have lambdas (basically JavaScript code that can make API calls[0] and be managed and tested[1]) that execute at fixed points in the auth lifecycle: - before a login is allowed - before a token is created - after a user returns from a federated login (SAML, OIDC, etc) - before a user registers And more[2]. And we're currently working on one for "before an MFA challenge is issued"[3]. There are some limitations[4]. We don't allow, for instance, loading of arbitrary JavaScript libraries. Not sure if that meets all your needs, but thought it was worth mentioning. 0: https://fusionauth.io/docs/extend/code/lambdas/lambda-remote-api-calls https://fusionauth.io/docs/extend/code/lambdas/lambda-remote... 1: https://fusionauth.io/docs/extend/code/lambdas/testing https://fusionauth.io/docs/extend/code/lambdas/testing 2: full list here: https://fusionauth.io/docs/extend/code/lambdas/ https://fusionauth.io/docs/extend/code/lambdas/ 3: https://github.com/FusionAuth/fusionauth-issues/issues/2309 https://github.com/FusionAuth/fusionauth-issues/issues/2309 4: https://fusionauth.io/docs/extend/code/lambdas/#limitations https://fusionauth.io/docs/extend/code/lambdas/#limitations
  - gnaman 11mo ago
    thank you I will check you guys out

by dizhn 11mo ago

fheisler 11mo ago

Thanks for the mention! (Authentik Security CEO here.) We've become something of Okta migration experts at this point... Cloudflare moved to us a couple years back after they had to be the ones to let Okta know it'd been breached yet again. [1] [1] https://blog.cloudflare.com/how-cloudflare-mitigated-yet-another-okta-compromise/ https://blog.cloudflare.com/how-cloudflare-mitigated-yet-ano...

dizhn 11mo ago
Cloudflare??? Damn. that is HUGE! Congratulations. You guys have a super solid product full of features and a decent founder. Maybe enterprises don't care about my favorite feature but it makes securing EVERYTHING a breeze. Embedded proxy! That is GOAT.

gnaman 11mo ago

No provider has been able to match Auth0 actions unfortunately. Auth0 allows you to execute custom code at any point in the auth lifecycle and allow/deny based on that or enrich user attributes. Super useful when you have a legacy system that is hard to migrate away from. If anyone has any recommendations I'm all ears

dizhn 11mo ago
I am not qualified to say whether Authentik can do all of what you need but it does allow custom python code in a lot of places. Perhaps you can ask whether what you need is available directly. They are very active in Discord.
- risson 11mo ago
  (authentik maintainer here) It does! Also, not only in the authentication process, but also during individual authorization flows, and in a few other places as well, like when a user edits their settings, or whenever an event (basically whenever something happens in authentik) but that's more a reactive process than inline
mooreds 11mo ago
I work for FusionAuth. We have lambdas (basically JavaScript code that can make API calls[0] and be managed and tested[1]) that execute at fixed points in the auth lifecycle: - before a login is allowed - before a token is created - after a user returns from a federated login (SAML, OIDC, etc) - before a user registers And more[2]. And we're currently working on one for "before an MFA challenge is issued"[3]. There are some limitations[4]. We don't allow, for instance, loading of arbitrary JavaScript libraries. Not sure if that meets all your needs, but thought it was worth mentioning. 0: https://fusionauth.io/docs/extend/code/lambdas/lambda-remote-api-calls https://fusionauth.io/docs/extend/code/lambdas/lambda-remote... 1: https://fusionauth.io/docs/extend/code/lambdas/testing https://fusionauth.io/docs/extend/code/lambdas/testing 2: full list here: https://fusionauth.io/docs/extend/code/lambdas/ https://fusionauth.io/docs/extend/code/lambdas/ 3: https://github.com/FusionAuth/fusionauth-issues/issues/2309 https://github.com/FusionAuth/fusionauth-issues/issues/2309 4: https://fusionauth.io/docs/extend/code/lambdas/#limitations https://fusionauth.io/docs/extend/code/lambdas/#limitations
- gnaman 11mo ago
  thank you I will check you guys out