Hacker News new | ask | show | jobs
by ignoramous 1937 days ago
> ...who else are a serious option for rock solid SaaS IdP?

Google Cloud (Firebase Auth), AWS (Cognito), and Azure (Active Directory) are as rock-solid as they come.

FusionAuth.io, userbase.com, and clerk.dev come to mind as well.

3 comments

Cognito is a joke. It’s full of bugs, the hosted UI doesn’t support half the features and -- based on the change velocity I’ve seen over the last three years —- it is desperately under-resourced by AWS. The new releases always seem to be small changes (like adding a new OAuth provider) but never fixes for the major bugs.
Anyone who's used cognito knows it's a joke compared to the others.
Azure Active Directory leaves much to be desired.

If it was not a MS product it would struggle to attract a market.

AAD implements SAML, OIDC, SCIM, LDAP, Kerberos, FIDO2 and more. Even if it was not a Microsoft product, it would have better non-proprietary interoperability than most other SSO platforms.
How so? I'd argue they're far ahead of the competition in features.
Except for all the basics like RBAC with multiple roles, JWT modification, simple MFA, etc.