Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Launch HN: SSOReady (YC W24) – Making SAML SSO painless and open source

github.com

Post reply on HN
Print view View original

51–60 of 101 posts

Re: Launch HN: SSOReady (YC W24) – Making SAML SSO painless and open source

#51

Post by doubled112 »

deathanatos wrote: post #29
whartung wrote: post #9

I can only wish you good luck. I mean it, best of luck to you all. We wrote our own IdP back in the day. It was a cool project, Single Sign On, Single Sign OUT, User provisioning, just all sorts of stuff. And it worked! It's amazing when it works, it's just like magic. You giggle when it works. We did all sorts of integrations. To random Service Providers, integrating with other IdPs, etc. Some were really cool. Grea…

> Add to that the very often the people you're integrating with have no concept of SAML, its workflows, its payloads, etc., much less the capabilities of their own stack in regards to SAML. So you get to train them (and learn about their system) at the same time. This is true of a great many protocols, unfortunately. I've seen this with IPSec, HL7v2, … CSV . IPSec was perhaps the most … scarring. Always sort of feeli…

SAML and IPsec both make my eye twitch, and I too have struggled where the person on the other end has no idea.

One of my favourites was the time I was trying to figure out a SAML integration with a client, and before the person on the client's "SSO team" could figure it out, I installed a demo of their SSO solution, integrated with my own dev AD, and found the checkbox.

Yay enterprise! The Q in enterprise is for quality.

Re: Launch HN: SSOReady (YC W24) – Making SAML SSO painless and open source

#55

Post by mwcampbell »

ucarion wrote: post #34
bilalq wrote: post #27

These days, I feel like this biggest obstacle with SAML is integrating with SaaS products. I've been in many situations where it requires back and forth emails to a support team. I've been handed a literal 204 page PDF on integrating with one vendor's SSO setup (the entire document was literally just for their SSO integration, nothing else). Attribute mappings are still a mess. It's wild how poor the experience still…

I've written one of these 204-page PDFs before (I think it was more like 20 pages though). The IDPs don't exactly make it easy on their customers to set this stuff up, and the burden ends up on the SP (i.e. you) to document to folks how to use their own IDP. Incidentally we just shipped something for this. Rather than having to make a 204-page PDF, you can go into SSOReady, generate a setup URL, and give it to custom…

Wow. My company previously did an SSO implementation for our SaaS where we ran Shibboleth SP behind Apache just for SSO, with a little Python web app using mod_wsgi to call back to the main web app after SSO was completed. But for the customers that we've onboarded to SSO so far, we had to contract with a SAML expert to work with the customer to set it up. This self-service setup might be enough to make it worth our while to migrate to SSOReady.

Re: Launch HN: SSOReady (YC W24) – Making SAML SSO painless and open source

#56

Post by mightybalthazar »

fishtoaster wrote: post #7

This looks very cool! Having implemented SAML before, it was definitely a pain and your tooling looks painless! That said, the pricing worries me a bit. This is a tool we'd have to build on top of . Which means that if it disappears later because you went out of business (or just changed your pricing in some way that hosed us), we'd have a whole big, unexpected engineering project to rewrite our SSO. And given that y…

100%. One thing I'd add since SAML is the gateway to your application, I don't like the idea of expecting premium support for a free product if I don't want to buy things this company does charge for later on. Don't forget one option is "call the founder"

Re: Launch HN: SSOReady (YC W24) – Making SAML SSO painless and open source

#58

Post by bearjaws »

deathanatos wrote: post #29
whartung wrote: post #9

I can only wish you good luck. I mean it, best of luck to you all. We wrote our own IdP back in the day. It was a cool project, Single Sign On, Single Sign OUT, User provisioning, just all sorts of stuff. And it worked! It's amazing when it works, it's just like magic. You giggle when it works. We did all sorts of integrations. To random Service Providers, integrating with other IdPs, etc. Some were really cool. Grea…

> Add to that the very often the people you're integrating with have no concept of SAML, its workflows, its payloads, etc., much less the capabilities of their own stack in regards to SAML. So you get to train them (and learn about their system) at the same time. This is true of a great many protocols, unfortunately. I've seen this with IPSec, HL7v2, … CSV . IPSec was perhaps the most … scarring. Always sort of feeli…

HL7v2, the protocol of "we just put all the data in this one random field".

Re: Launch HN: SSOReady (YC W24) – Making SAML SSO painless and open source

#60

Post by ceejayoz »

ucarion wrote: post #46
mightybalthazar wrote: post #42

What happens if my enterprise custies need support because they can't log in and I need support? GitHub Issue? email?

My personal phone number and email is in the sidebar of app.ssoready.com for this exact reason.

That's kind of you, but highly unlikely to be scalable.
Post reply on HN