Live data from Hacker News

Show HN: BoxyHQ – open-source alternative to Auth0/WorkOS

boxyhq.com

21–30 of 41 posts

Re: Show HN: BoxyHQ – open-source alternative to Auth0/WorkOS

#21
post #20

> The main difference with Auth0 and WorkOS is that BoxyHQ is being built on an open source ethos. Our focus is to be a developer-first security platform, putting developers at the centre of our holistic approach and help them close the gap between compliance and security. Not to detract from this project, but I'm familiar with Auth0 and WorkOS both, and I think both would say the same thing about themselves.

Yep, we even launched WorkOS via HN :) https://news.ycombinator.com/item?id=22607402

Would love to see both Auth0 and WorkOS go open-source as well! ;) Jokes aside, hi grinich. Would love to catch up sometime, my email is deepak@boxyhq.com

Re: Show HN: BoxyHQ – open-source alternative to Auth0/WorkOS

#22
If anyone knows an identity solution that supports bilateral and multilateral saml (federation of identity providers), automatic retrieval of metadata/certs, Oauth, Oidc, group rules, IDP discovery (routing to IDP based on identifier), wayfless, and IP Authentication I would love to hear about it. We run a B2B that sells our web based service into education (primary to through to university) and have a small team so are always interested in solutions in this space.

Re: Show HN: BoxyHQ – open-source alternative to Auth0/WorkOS

#24

How are you planning to make money?

> Our core will always be free (Apache 2.0 license) and our commercials will be based on the following models: 1) A hosted solution in the future 2) Premium features on top of our core (To ease deployment, administration and integrations with Enterprise security products) 3) Vertical specific solutions for regulated industries like Healthcare and Finance.

Re: Show HN: BoxyHQ – open-source alternative to Auth0/WorkOS

#25

If anyone knows an identity solution that supports bilateral and multilateral saml (federation of identity providers), automatic retrieval of metadata/certs, Oauth, Oidc, group rules, IDP discovery (routing to IDP based on identifier), wayfless, and IP Authentication I would love to hear about it. We run a B2B that sells our web based service into education (primary to through to university) and have a small team so…

Great question, I would think Shibboleth might cover some of the topics you are looking for. I am not too experienced with the education sector, would love to chat further to get a better understanding.

Re: Show HN: BoxyHQ – open-source alternative to Auth0/WorkOS

#26

If anyone knows an identity solution that supports bilateral and multilateral saml (federation of identity providers), automatic retrieval of metadata/certs, Oauth, Oidc, group rules, IDP discovery (routing to IDP based on identifier), wayfless, and IP Authentication I would love to hear about it. We run a B2B that sells our web based service into education (primary to through to university) and have a small team so…

Great question, I would think Shibboleth might cover some of the topics you are looking for. I am not too experienced with the education sector, would love to chat further to get a better understanding.

I work in education, Shibboleth is indeed what we use for these types of things. You go through the shib portal and depending on your email address get redirected to your institutions SAML login and back.

Somewhat similar to using Azure or Okta B2B integration, but with support for things that don't support native SAML and older legacy platforms that we just can't kill.

Re: Show HN: BoxyHQ – open-source alternative to Auth0/WorkOS

#27

If anyone knows an identity solution that supports bilateral and multilateral saml (federation of identity providers), automatic retrieval of metadata/certs, Oauth, Oidc, group rules, IDP discovery (routing to IDP based on identifier), wayfless, and IP Authentication I would love to hear about it. We run a B2B that sells our web based service into education (primary to through to university) and have a small team so…

I'd love to chat with you about this, but you don't have contact info listed in your HN profile. Can you send me a note?

Re: Show HN: BoxyHQ – open-source alternative to Auth0/WorkOS

#28

keycloak is an easy to use easy to deploy idp

That's an opinion, not always true for everyone. I love Keycloak, but I've seen several large enterprises trial it and give up due to complexity at their particular scale. I've seen bigger orgs use it successfully in a simpler tech landscape.

Regardless, this is a solution for your application that doesn't require running something like Keycloak. If I was developing an application I'd be looking at this, Auth0 or WorkOS to get the features my customers are demanding. (SSO/SAML/OAUTH mostly). Keycloak does the opposite, as a business I could deploy Keyclock to be my SAML IDP, but still need my applications to support SAML.

Re: Show HN: BoxyHQ – open-source alternative to Auth0/WorkOS

#29

Earlier quoted context omitted.

Thank you tailspin2019, it definitely is an interesting day for an SSO product! :) It is a Pulp Fiction reference but I agree it is confusing. We'll refine the intro and the CTA on the webpage, great feedback. Our core will always be free (Apache 2.0 license) and our commercials will be based on the following models: 1) A hosted solution in the future 2) Premium features on top of our core (To ease deployment, admini…

Thanks I was looking further at GitHub and realise that Jackson and Hermes etc are your product names. Perhaps you could mention these product names on the marketing site so there is a bit of continuity between that and GitHub/docs? I like the humour. My instinct would be to either “own” those product names fully and use them boldly throughout, or deemphasise them in favour of your Boxy brand… :) Looking at the Audit…

Futurama

Re: Show HN: BoxyHQ – open-source alternative to Auth0/WorkOS

#30

keycloak is an easy to use easy to deploy idp

That's an opinion, not always true for everyone. I love Keycloak, but I've seen several large enterprises trial it and give up due to complexity at their particular scale. I've seen bigger orgs use it successfully in a simpler tech landscape. Regardless, this is a solution for your application that doesn't require running something like Keycloak. If I was developing an application I'd be looking at this, Auth0 or Wor…

Thanks zwayhowder, that's a great summary!
Post reply on HN