Kratos

Security and privacy

authentication and identity

SHOW HN2023

Kratos

Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0

github.com

#authentication#identity management#open source auth#auth0 alternative#oauth

88points
50comments
#726of 3,109 in 2023
Top 24%of 2023 by points

How HN took it

MixedNo clear lean

7 positive, 16 neutral or asking, 0 mixed, 12 critical, out of 35 comments about the project. Thread score -0.14.

Design: 0 for, 5 againstDocs: 2 for, 2 againstPrivacy: 0 for, 3 againstPricing: 1 for, 1 againstExecution: 1 for, 0 against

The thread, comment by comment

Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.

positive neutral or mixed critical about another commenter or something else the maker

What HN said

What people liked

  • Self-hosted use described as fantastic for years.

    From 1 comment
    • Congrats to the Ory team. We've been using it successfully at my company (self hosted) for the past ~2 years and it's been fantastic.
      edude03 on HN
  • Open source auth lets engineers run the stack locally and debug issues.

    From 1 comment
    • I can’t believe that people use closed source auth solutions. As a security engineer, I am so thankful that Ory exists. If you can’t run your auth stack locally, your engineers…
      breadchris on HN
  • Slack community and engineer support were helpful.

    From 2 comments
    • Can't share that experience. We are in the process of migrating from Azure B2C to ORY Network and had also some initial doubts if their products are a good fit for our enterprise…
      davidspiess on HN
    • Their Slack workspace is quite helpful
      lykahb on HN

Objections

  • Documentation is confusing and hard to integrate.

    From 2 comments
    • Why are people still using Ory Kratos? It's still incredibly confusing documentation. Large fan of projects like: https://supertokens.com/ that focus on making authentication…
      alphabetatheta on HN
    • I want to love ory but honestly I have no idea how to integrate it like I can with supertokens. Literally looking to move from supertokens and have spent 4 hours trying to grok…
      nickreese on HN
  • Website fails to explain differences from competitors.

    From 2 comments
    • A great example of a website that completely fails to clearly explain how it's different from the competition.
      nprateem on HN
    • I understood its something to do with auth but even the comparison pages didn't clarify in meaningful ways how it's different. I don't see how this could help me get more users -…
      nprateem on HN
  • Sales process felt pushy and refused technical contact.

    From 1 comment
    • A while ago my team needed exactly this kind of auth solution, so the eng team reached out to Ory to clarify some technical questions that weren't covered by the docs. We were…
      2mol on HN
  • Website cookie banner criticised as non-GDPR compliant.

    From 2 comments
    • Funny how you claim to support GDPR but your own site displays a non-compliant cookie banner.
      illiarian on HN
    • It's their choice to chose that banner, and their choice to configure it this way. Most third-party banners are non-compliant, including this one. Which they should know, given…
      illiarian on HN

Requests

  • Support LDAP/AD connectivity.

    From 1 comment
    • Just curious, when will it get LDAP/AD Connectivity? I saw here https://www.ory.sh/comparisons/ory-vs-keycloak/ that it doesn't have this feature
      mihaitodor on HN
  • Support multi-tenancy in a single deployment.

    From 1 comment
    • Are there any plans to support multi-tenancy? I understand that the current recommendation is to run multiple separate deployments, but will it be supported for a single…
      zinclozenge on HN

Questions

  • What remains before the 1.0 release?

    From 1 comment
    • What's left before you'll be ready to release 1.0 and how will the project change once you've reached that milestone?
      8organicbits on HN
  • Is it an alternative to Keycloak, and does it support realms?

    From 1 comment
    • Is this an alternative to Keycloak? One thing Keycloak supports is the ability to create multiple realms in order to use one instance for different groups of users and…
      sureglymop on HN

Alternatives named

  • Keycloak

    From 2 comments
    • Is this an alternative to Keycloak? One thing Keycloak supports is the ability to create multiple realms in order to use one instance for different groups of users and…
      sureglymop on HN
    • Just click the comparison links, e.g., ory vs keycloak leads to: https://www.ory.sh/comparisons/ory-vs-keycloak/ the chart may be hidden "below the fold," so scroll down.
      meepmorp on HN
  • Auth0

    From 1 comment
    • I think their Github "About" text is quite clear imho. An open source identity service that can be an alternative to similar commercial ones like Okta, Auth0.
      snowstormsun on HN
  • SuperTokens

    From 2 comments
    • I want to love ory but honestly I have no idea how to integrate it like I can with supertokens. Literally looking to move from supertokens and have spent 4 hours trying to grok…
      nickreese on HN
    • Why are people still using Ory Kratos? It's still incredibly confusing documentation. Large fan of projects like: https://supertokens.com/ that focus on making authentication…
      alphabetatheta on HN
  • Stytch

    From 1 comment
    • > ...basically presumed that our eng team wasn't the decision maker (it was). I work at an auth company as well, Stytch, and this is something that we treat as obvious but we've…
      cco on HN

Category, keywords, summaries and labels on this page were made by AI (Thread Reader v2) and not checked by hand. Each point links to the comments it came from.

Add a badge to your READMEShown on HackerShow
[![Shown on HackerShow](https://hackershow.org/badge.svg)](https://hackershow.org/show/35628642)