Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Okta to Acquire Auth0 for $6.5B

cnbc.com

Post reply on HN
Print view View original

131–140 of 326 posts

Re: Okta to Acquire Auth0 for $6.5B

#131

Post by Azeralthefallen »

I hate this. We moved from Okta a few years ago after we were basically received almost no actual real support for a bunch of issues, even though we were paying a premium cost. Nobody cares about issues on their Github, the kicker was a when we received a support response as suddenly something was no longer working after an update, we got help in the form of "We have no plans to address this anytime soon." when asking for an ETA.

We ended up switching to Auth0, after we had a few calls with them. We shaved a decent amount off our costs with Auth0's Enterprise plan, and their webtask based rules worked. While the migration sucked for a bit, in the end we were much happier.

Re: Okta to Acquire Auth0 for $6.5B

#132

Post by diatone »

invokestatic wrote: post #77
jfengel wrote: post #57

Earlier quoted context omitted.

If Okta is ever compromised, they have a team of people working 24 hours a day to deal with it as quickly as possible. And, of course, to prevent it from happening. When it comes to security, it's often a pretty good idea to put all of your eggs in one basket, and then make sure it's a really, really good basket. Unless you're certain you can make a better basket yourself -- and when it comes to auth, there are a lot…

I've heard the exact opposite for security: defense-in-depth. For example, IdP with Okta and 2FA with Duo. This seems much better to me.

Agreed.

To add something useful to the conversation & giving the benefit of the doubt: maybe the parent was describing a situation where an org didn't have a cohesive security plan. If half your people are using one service, and the other half are using another, you've got a problem. I suppose this can blow out in complexity, and maybe risk(?), once you're stacking services (IdP, MFA, ...).

Re: Okta to Acquire Auth0 for $6.5B

#133

Post by eropple »

vwpolo3 wrote: post #113
andrew_ wrote: post #50

I hope this gives rise to another, smaller viable party outside of Amazon, Google, and Microsoft. Perhaps I'm jaded, perhaps hopelessly biased - but I can only see this as a net negative. Okta's open source packages receive a pitiful amount of attention (for example: https://github.com/okta/okta-oidc-js/issues?q=is%3Aissue+is%... ) with forks almost becoming a requirement. Auth0 by contrast has been "on the ball" for…

There are already true open source alternatives on the horizon such as https://github.com/ory It is about time for a new generation of identity systems in my opinion. This acquisition shows the risk of centralized, vendor locked-in services.

Ory is really interesting but not, IMO, quite there yet. There are a bunch of Kratos features that aren't there but, once they are, I think it's a really compelling option.

Re: Okta to Acquire Auth0 for $6.5B

#134

Post by tyingq »

nickysielicki wrote: post #104

$6,500,000,000.00 for a company providing authentication APIs? Am I the only person left on earth that hasn't lost his mind?

Enterprise customers with Enterprisey wallets.

Edit: Ping Identity might be a good place to invest, they look a bit low right now, and they support cloud and on-prem.

Re: Okta to Acquire Auth0 for $6.5B

#136

Post by theptip »

Azeralthefallen wrote: post #131

I hate this. We moved from Okta a few years ago after we were basically received almost no actual real support for a bunch of issues, even though we were paying a premium cost. Nobody cares about issues on their Github, the kicker was a when we received a support response as suddenly something was no longer working after an update, we got help in the form of "We have no plans to address this anytime soon." when askin…

Can second this, Okta requires you to "contact support" to turn on basic features like email customization, and even though I'm a paying customer, I was given a multi-week estimate (after waiting a week or two) for how long it would take to enable this feature.

It's a flag in the web UI in Auth0.

This did not fill me with confidence.

Re: Okta to Acquire Auth0 for $6.5B

#137

Post by hangonhn »

andrew_ wrote: post #50

I hope this gives rise to another, smaller viable party outside of Amazon, Google, and Microsoft. Perhaps I'm jaded, perhaps hopelessly biased - but I can only see this as a net negative. Okta's open source packages receive a pitiful amount of attention (for example: https://github.com/okta/okta-oidc-js/issues?q=is%3Aissue+is%... ) with forks almost becoming a requirement. Auth0 by contrast has been "on the ball" for…

100%.

We use Okta but to write some integration with their OIDC service, I found it much easier and secure to use the Auth0 libraries. I found Okta's support to be really lacking. And while features like Token Exchange has been in draft form for 5 years and finalized a year ago, Okta still hasn't implemented and their beta won't be ready until later this year.

Not a fan of Okta but their business model does have really good vendor lock-in.

Re: Okta to Acquire Auth0 for $6.5B

#138

Post by NomDePlum »

neom wrote: post #116
robotdan wrote: post #88

Earlier quoted context omitted.

Thanks for the mention. We already do see quite a few Auth0 converts. I expect to gain a lot of new customers as a result of this merger in the coming months. No complaints here.

Hey Dan, curious: why it's so difficult to figure out who is behind the company from the website?

I'm curious why that matters?

Part of that curiosity is because the answers so far talk about 'About'pages and similar.

What's the added benefit/trust you are looking for here?

Apologies if my question is naïve.

Re: Okta to Acquire Auth0 for $6.5B

#139

Post by hangonhn »

Azeralthefallen wrote: post #131

I hate this. We moved from Okta a few years ago after we were basically received almost no actual real support for a bunch of issues, even though we were paying a premium cost. Nobody cares about issues on their Github, the kicker was a when we received a support response as suddenly something was no longer working after an update, we got help in the form of "We have no plans to address this anytime soon." when askin…

Yeah current Okta customer and same experience as you. I was thinking of maybe going to Auth0 but well at least this news came out before we put any serious work into planning.

sigh

Auth0 at least has much better docs and libraries. It feels like Auth0 at least cared more.

Re: Okta to Acquire Auth0 for $6.5B

#140

Post by wp381640 »

p_l wrote: post #128
wp381640 wrote: post #122

Earlier quoted context omitted.

Lack of webauthn might be a stopper for some, but it's in the pipeline: https://github.com/keycloak/keycloak-community/blob/master/d...

Huh, I'm pretty sure it's present by default (not behind a flag) in current versions of Keycloak - would have liked to use it but our setup is so heavily firewalled tokens wouldn't make it over ;)

I'm going to check it out again today because last eval I did with this requirement was ~10 months ago
Post reply on HN