Ory Kratos
Infrastructure
identity server
SHOW HN2022
290points
65comments
#149of 2,570 in 2022
Top 6%of 2022 by points
How HN took it
CuriousMostly questions and neutral comments
9 positive, 27 neutral or asking, 5 mixed, 5 critical, out of 46 comments about the project. Thread score +0.07.
Execution: 2 for, 2 againstDocs: 2 for, 0 againstIdea: 1 for, 1 againstDesign: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Documentation explains how auth systems work
From 2 comments
I learned so much about AuthN and AuthZ from reading Ory code and docs. Sometimes it seems like Ory is the only web auth stuff on the internet that’s intended for you to…
skrtskrt on HNThe Ory suite seems like quite an amazing project! I have read through quite a bit of the documentation and I really appreciate the in depth yet understandable explanations of…
moooo99 on HN
Components are modular and understandable
From 1 comment
I love the way Ory is set up and documented to be understandable and deployable as components. I played with Kratos a couple weeks ago and made a single vm deployment using…
tinco on HN
Solid in professional use
From 1 comment
Using it professionally at my current client, seems solid so far. Good work!
davedx on HN
Objections
Documentation gaps for integrations and some features
From 2 comments
Congratulations on Kratos coming out of Beta. We evaluated Ory a few months ago. My understanding: 1. Ory Kratos provides session-based authentication and user management. 2. Ory…
wharfjumper on HNThe Ory suite seems like quite an amazing project! I have read through quite a bit of the documentation and I really appreciate the in depth yet understandable explanations of…
moooo99 on HN
Calling it identity is misleading for what it does
From 2 comments
Hey, I've seen the project in the past and it's very interesting, and definitely an improvement over existing alternatives. That said, I have one complaint quite unrelated to…
slx26 on HNA user account, an email or a phone number do not uniquely identify a person or process, and it doesn't tell you whether it's actually a person or a process. Edit: "account" may…
slx26 on HN
API only, needs a separate UI to be built
From 2 comments
Is there an UI for the identity management like defining roles and assigning identities to roles? I see the API part. But is there an UI part, besides the self-service account…
PinguTS on HNIt's API only. The UI is for you to create.
donatzsky on HN
Requests
SAML support
From 1 comment
Are there any plans for SAML support anytime soon?
scarmig on HN
Multi-tenancy like Keycloak realms
From 1 comment
Are there plans for handling multi-tenancy? Sort of like with Keycloak's realms.
atonse on HN
Token authentication and service tokens
From 1 comment
Ory suite looks amazing. I think the biggest things I'm missing are token authentication and with that, services tokens. I saw a thread saying it'll be implemented at some point…
lapser on HN
Questions
How does it differ from Keycloak
From 2 comments
Quick question: how does this differ from keycloak? Are they competing products or do they work fundamentally differently?
revel on HNI'm also a huge fan of Keycloak for the same reason. It's been a while since I've looked at the Ory suite, but at least a year or two ago Keycloak was still the much more mature…
andrewstuart2 on HN
Can users migrate from IdentityServer4 and ASP.NET Identity
From 2 comments
Would it be possible to migrate from IdentityServer4 & ASP.NET Identity Core? I currently have a SaaS running those 2 and would love to eventually migrate all users to Kratos.
longrod on HNPretty sure! We have documentation on importing users and already support several hashing algorithms. Support for more algorithms will follow soon!
baconfly on HN
Is there a UI for role management
From 1 comment
Is there an UI for the identity management like defining roles and assigning identities to roles? I see the API part. But is there an UI part, besides the self-service account…
PinguTS on HN
Alternatives named
Keycloak
From 2 comments
I'm also a huge fan of Keycloak for the same reason. It's been a while since I've looked at the Ory suite, but at least a year or two ago Keycloak was still the much more mature…
andrewstuart2 on HNThis was one of the primary reasons I ended up going with Keycloak, it's "batteries included" as far as UI goes. UI for management, impersonation, configuration, etc... with…
claytongulick on HN
Duende IdentityServer
From 2 comments
In the .NET world, while no longer free (still is open source), there is https://duendesoftware.com/. The folks behind the company and libraries know what they're doing.
daigoba66 on HNI think "Identity Provider" is more correct, no? "IdentityServer" is the name of a specific IdP implemented in .NET (formerly OSS as…
smcl on HN
AWS Cognito
From 1 comment
Congratulations on Kratos coming out of Beta. We evaluated Ory a few months ago. My understanding: 1. Ory Kratos provides session-based authentication and user management. 2. Ory…
wharfjumper on HN
node-oidc-provider
From 1 comment
I'm passing familiar with this area, but not as familiar as I should be... How does this compare to something like this - https://github.com/panva/node-oidc-provider Are they…
Nursie on HN