Ask HN: What are the major open source alternatives to Auth0?

Author: eatonphil

Score: 13

Comments: 12

Date: 2021-11-30 14:35:20

________________________________________________________________________________

gabrielsroka wrote at 2021-11-30 21:27:03:

Shibboleth? It does OIDC and SAML, etc.

https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/page...

mindcrime wrote at 2021-11-30 14:38:37:

CAS?

https://www.apereo.org/projects/cas

https://github.com/apereo/cas

https://apereo.github.io/cas/6.4.x/index.html

Also, floating around out there, somewhere, on the 'net, should be whatever became of the old Sun Identity Manager product. During the Jonathon Schwartz era, Sun made a TON of their products Open Source, but after the Oracle acquisition a lot of that stuff was left to more or less die on the vine. But in some cases, other firms picked up the code and continued the project(s). I think that happened for their Idm product, but don't quote me on that.

jen20 wrote at 2021-11-30 16:46:38:

ForgeRock picked up a bunch of it and did just as objectionable things with the licensing - for all intents and purposes the the Sun identity stuff is dead unless you enjoy dealing with ghouls.

I’d say better alternatives to Auth0 today are things like KeyCloak.

mindcrime wrote at 2021-11-30 18:20:42:

Aah, yeah, I remember now, Sun did make a lot of stuff Open Source, but they used a slightly controversial license (the CDDL[1]) for a lot of it. As I recall, it caused a lot of grief for people who wanted to pick up their stuff and do anything downstream with it.

I do remember the name ForgeRock now, but I never used any of their stuff. By the time all that happened, I wasn't doing much in the IdM space anymore.

The whole episode is kind sad, really. Schwartz did some good things at Sun, and while their embrace of Open Source wasn't perfect, they released a lot of code and put a lot of weight behind F/OSS. If they had been able to continue as an independent company a bit longer, and not get borg'd by Oracle, it would have been interesting to see what might have happened.

[1]:

https://en.wikipedia.org/wiki/Common_Development_and_Distrib...

eatonphil wrote at 2021-11-30 14:41:19:

Thank you!

Nezteb wrote at 2021-11-30 19:18:57:

https://supabase.com/

is a new popular option.

eatonphil wrote at 2021-11-30 19:37:25:

I don't think that's an alternative to auth0 but an alternative to an entire backend. You don't just use supabase as your auth service AFAIK.

kiwicopple wrote at 2021-12-01 01:50:56:

{supabase ceo}

You can! A lot of people do. Or you can use the Auth server directly:

https://github.com/supabase/gotrue

sharemywin wrote at 2021-11-30 15:47:45:

https://www.ory.sh/login-spa-react-nextjs-authentication-exa...

eatonphil wrote at 2021-11-30 16:31:18:

I mentioned Ory already, thanks!

der-ofenmeister wrote at 2021-11-30 21:55:01:

passportjs if you're using node

<

http://www.passportjs.org/

eatonphil wrote at 2021-11-30 21:55:43:

That's not an auth server AFAIK, that's just a library for connecting to auth servers.