Earlier quoted context omitted.
Nice, I have heard about Ambassador before but did not have the time to look into it in detail. It is just amazing how much OSS is being created around the k8s/container ecosystem and I truly believe that it will greatly improve our lives as developers in the future. I've added this to our internal list and we will check it out and see if any synergies are possible with our products. Our vision is that these services…
I was just speaking with Datawire/Ambassador CEO in their slack about Oathkeeper... you should reach out and speak with them. Interesting synergies IMO.
Show HN: Oathkeeper – Cloud-Native Identity and Access Proxy
11–20 of 89 posts
Re: Show HN: Oathkeeper – Cloud-Native Identity and Access Proxy
#12Earlier quoted context omitted.
I really like this suite of projects, it splits the problem nicely into flexible building blocks. How do you envision integration of existing external OAuth2 or OpenID Connect servers, such as Google, GitHub, etc., or an OAuth2-compliant directory of a B2B customer?
We're currently starting to work on ORY Hive (project name wip) which is going to be a fully functional identity management service (user registration, login, social sign in, password reset, MFA, ...) sort of along the lines of Auth0 or AWS Cognito, but as an OSS solution. As part of that service, we will add connectivity adapters for generic OAuth2/OIDC providers as well as (probably) LDAP/AD and SAML integration. W…
Re: Show HN: Oathkeeper – Cloud-Native Identity and Access Proxy
#13Earlier quoted context omitted.
Seems like you are describing Ambassador here [0]. I think this could play nice as Ambassador's external auth service [1]. Oathkeeper looks very interesting... Congrats and best of luck! [0] https://www.getambassador.io [1] https://www.getambassador.io/reference/services/auth-service
Nice, I have heard about Ambassador before but did not have the time to look into it in detail. It is just amazing how much OSS is being created around the k8s/container ecosystem and I truly believe that it will greatly improve our lives as developers in the future. I've added this to our internal list and we will check it out and see if any synergies are possible with our products. Our vision is that these services…
Re: Show HN: Oathkeeper – Cloud-Native Identity and Access Proxy
#14Earlier quoted context omitted.
I really like this suite of projects, it splits the problem nicely into flexible building blocks. How do you envision integration of existing external OAuth2 or OpenID Connect servers, such as Google, GitHub, etc., or an OAuth2-compliant directory of a B2B customer?
We're currently starting to work on ORY Hive (project name wip) which is going to be a fully functional identity management service (user registration, login, social sign in, password reset, MFA, ...) sort of along the lines of Auth0 or AWS Cognito, but as an OSS solution. As part of that service, we will add connectivity adapters for generic OAuth2/OIDC providers as well as (probably) LDAP/AD and SAML integration. W…
There are two main patterns for B2B apps:
- One org per user, like G Suite. A user is a member of a single org, to be a member of another org requires another user account. This creates a challenge when it is a system where someone might be a member of multiple orgs, because it requires logging in as multiple users and having cookies that can handle that.
- One user in many orgs, like GitHub. A users "owns" their user account, and is invited to one or more orgs. This makes working in multiple orgs easier, but can create challenges for companies that want to enforce things within their org, like SSO or 2FA. It also creates issues with routing of notifications (you want work notifications going to work email), and identity of users within a company (an org admin may have trouble identifying users if they aren't tied to company emails).
An ecosystem like ORY obviously can't alleviate all the issues, but maybe it can help with some of them, like org membership and org friendly cookies.
Re: Show HN: Oathkeeper – Cloud-Native Identity and Access Proxy
#15Earlier quoted context omitted.
Nice, I have heard about Ambassador before but did not have the time to look into it in detail. It is just amazing how much OSS is being created around the k8s/container ecosystem and I truly believe that it will greatly improve our lives as developers in the future. I've added this to our internal list and we will check it out and see if any synergies are possible with our products. Our vision is that these services…
Check out CNCF's Interactive Landscape to keep track of the ecosystem: https://l.cncf.io
Re: Show HN: Oathkeeper – Cloud-Native Identity and Access Proxy
#16Earlier quoted context omitted.
We're currently starting to work on ORY Hive (project name wip) which is going to be a fully functional identity management service (user registration, login, social sign in, password reset, MFA, ...) sort of along the lines of Auth0 or AWS Cognito, but as an OSS solution. As part of that service, we will add connectivity adapters for generic OAuth2/OIDC providers as well as (probably) LDAP/AD and SAML integration. W…
That sounds awesome! I'd really like to see organizational management, i.e., users in orgs. It is something most B2B SaaS apps have to do, and they tend to do it differently and often very poorly. Maybe it is out of the scope of ORY Hive, but I think it would be really useful. I'm thinking it would tie into an RBAC system to give users different permissions within orgs (member, admin, owner, etc.). There are two main…
I think in the end it boils down to what we can solve in a generic manner and what we can let developers solve for themselves. The distinction between the two use cases is definitely something we'll take a closer look at and include in our design decisions, so this won't be an afterthought but something built into the architecture!
Thank you for your constructive feedback!
Re: Show HN: Oathkeeper – Cloud-Native Identity and Access Proxy
#17The idea of the ory ecosystem ( https://github.com/ory / https://www.ory.am ) is to build a reliable, cloud native suite of tools which allow you to solve simple and complex IAM (identity and access management) use cases. Each service works standalone, but you can obviously combine them all. The Oathkeeper proxy is one piece of the puzzle which basically takes incoming HTTP requests, evaluates them on a set of rules…
Re: Show HN: Oathkeeper – Cloud-Native Identity and Access Proxy
#18[0]https://www.splcenter.org/fighting-hate/extremist-files/grou...
Re: Show HN: Oathkeeper – Cloud-Native Identity and Access Proxy
#19Re: Show HN: Oathkeeper – Cloud-Native Identity and Access Proxy
#20Are you aware that this project shares a name with an extremist group[0]? I'm not sure how concerned you are about that, especially if you're not American, but I'd want to know if it were one of my projects. [0] https://www.splcenter.org/fighting-hate/extremist-files/grou...
We do not share nor endorse extremist views nor "values", nor have anything to do with extremist groups whatsoever. We have not heard about them (Oath Keepers) before.
We'll discuss a name change internally & with the community.
ps: It also shares the name of the sword from Game of Thrones and is a wordplay on OAuth :)
edit:// Forgot to thank you for raising awareness on this.