Live data from Hacker News

Okta to Acquire Auth0 for $6.5B

cnbc.com

251–260 of 326 posts

Re: Okta to Acquire Auth0 for $6.5B

#251

Really not a fan of this. Okta as a business are a pain to deal with, and unless you meet their minimum spend requirements (which are not told to you up-front) you're screwed. I've rolled out a ton of commercial products where we started with 1-2 users or a few units of compute, and on the basic little/no support options. When those products succeed, and we can demonstrate that not only does it meet our needs on pape…

I've seen the "we cant take credit cards and just start charging" fight play out on the other end. The reason was that the sales teams objected to their commissions being bypassed, so everything had to funnel through the sales pipeline.

Re: Okta to Acquire Auth0 for $6.5B

#252

Earlier quoted context omitted.

I was thinking very seriously about starting this company. There were some details I could never work out, and then Covid hit, so I didn't pursue it. My thoughts are: 1) One login per day per person is the maximum number of times I would ever consider asking for authentication. This is where OAuth fails; you visit an app that wants you to authenticate, but you don't get automatically logged in. You have to click at l…

I thought I was the only one to get offended every time I have to relogin lol. AWS is the absolute worst, logs me out every 5 minutes. I have been fascinated about google's identity aware proxy design. We have adopted something similar at much smaller scale with kubernetes and sidecars, I can attest we're absolutely more productive.

On the point about AWS, there are settings in your account to prevent that happening - whoever is managing it may have set the log out time a bit low.

Re: Okta to Acquire Auth0 for $6.5B

#253
post #50

I hope this gives rise to another, smaller viable party outside of Amazon, Google, and Microsoft. Perhaps I'm jaded, perhaps hopelessly biased - but I can only see this as a net negative. Okta's open source packages receive a pitiful amount of attention (for example: https://github.com/okta/okta-oidc-js/issues?q=is%3Aissue+is%... ) with forks almost becoming a requirement. Auth0 by contrast has been "on the ball" for…

There are already true open source alternatives on the horizon such as https://github.com/ory It is about time for a new generation of identity systems in my opinion. This acquisition shows the risk of centralized, vendor locked-in services.

https://www.keycloak.org/ is another open source option.

Compared to other choices, it's more mature and well-vetted because it forms the upstream for RedHat's SSO offering.

On the other hand, it's a big monolithic Java app, but they are making some moves to be more CNF-friendly: https://www.keycloak.org/2020/12/first-keycloak-x-release.ad...

Re: Okta to Acquire Auth0 for $6.5B

#254

I hate this. We moved from Okta a few years ago after we were basically received almost no actual real support for a bunch of issues, even though we were paying a premium cost. Nobody cares about issues on their Github, the kicker was a when we received a support response as suddenly something was no longer working after an update, we got help in the form of "We have no plans to address this anytime soon." when askin…

Sounds right. We use Okta for multiple AWS accounts and they "ran a bad migration" that deleted half our permissions and took a month to resolve. On top of that, nothing appeared in the audit logs.

To make matters worse, they have 3 APIs. Two are internal with 1 html and 1 json-based. The external one is the least feature rich and is missing configuration items that make IaC a challenge (you get about 80% configured then have to make changes in the gui)

Re: Okta to Acquire Auth0 for $6.5B

#255
post #225

Earlier quoted context omitted.

I'm curious why that matters? Part of that curiosity is because the answers so far talk about 'About'pages and similar. What's the added benefit/trust you are looking for here? Apologies if my question is naïve.

To me, the about us page is one of the more difficult things to fake and can at least tell you whether the company is brand new or maybe owned by a big company or just a recent startup. I have found out quite a few scams by looking at the about us page and researching the names on the page. Most everyone working in tech had some kind of digital trail that would take a lot of effort to fake. If I get taken for a ride,…

100% agreed on this. Also: because reputations matter.

Re: Okta to Acquire Auth0 for $6.5B

#256
post #157

$6,500,000,000.00 for a company providing authentication APIs? Am I the only person left on earth that hasn't lost his mind?

That sounds crazy to me too. By comparison, Microsoft paid $7.5B for Github and Google paid $2.6B for Looker. Idaptive, another IdP (I don't know how it compares in terms of features or client base) was bought by Cyberark for a mere $70M.

Makes GitHub look like the buy of the century. Which it may well turn out to be.

Re: Okta to Acquire Auth0 for $6.5B

#257
post #190

> and integrated over time I'm reading too much into this sentence fragment and it fills me with fear. I smell breaking domain changes in the future. They can't allow the .auth0.com tenants to operate as-is forever, which means existing tenants will get grandfathered in and eventually forced off the .auth0.com domain onto okta's domains. I smell messy login sites in the future. I like Auth0's implementation of their…

> They can't allow the .auth0.com tenants to operate as-is forever Why not?

Because Okta just acquired Auth0. If we look at previous acquisitions, the usual flow is something like this:

1) Company A acquires company B, promises nothing will change

2) Company A hints that company B will slowly be integrated into Company A

3) Everything Company B did becomes deprecated and migration plans are made for 70% of features to get integrated into Company A

4) Users who need the rest of 30% need to find a different service when things start to get turned off

I see no reason why this Okta/Auth0 acquisition would be different. Especially anything that is branded as Auth0 will disappear or get renamed to Okta. So at least the domain will change, which will require both infrastructure, backend and frontend changes most likely. Sucks, as the change is not needed and doesn't improve anything, it's just needed for Okta to rebrand Auth0.

Re: Okta to Acquire Auth0 for $6.5B

#258
post #21

Earlier quoted context omitted.

I recommend SuperTokens https://supertokens.io/

Not having any 2FA makes it a non-starter for a lot of people.

We're working on it! Passwordless will be our next release in a few weeks and then 2FA comes next

Re: Okta to Acquire Auth0 for $6.5B

#260
post #120

If you want to own your identity management, consider Keycloak. It's mature, battle-tested, and works like a champ.

Cheald, SuperTokens isnt as mature as Keycloak but we make up for it in other ways (ease of implementation, frontend UI, hosted offering, docs and support). Would appreciate your consideration!
Post reply on HN