Ory Kratos
Security and privacy
authentication
SHOW HN2021
107points
49comments
#493of 2,533 in 2021
Top 20%of 2021 by points
How HN took it
CuriousMostly questions and neutral comments
2 positive, 31 neutral or asking, 2 mixed, 5 critical, out of 40 comments about the project. Thread score -0.00.
Docs: 0 for, 2 againstPricing: 0 for, 2 againstExecution: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Easy to integrate and delegates hard authentication parts
From 3 comments
For those looking for a comparison, this is like an alternative to KeyCloak, except you have to "bring your own UI" - which I see as a pro, not a con. I've been evaluating Kratos…
joekrill on HNBeen working on a webapp on-and-off using Kratos for a bit and it is a massive relief to be able to delegate the hard parts of authentication to something else. My only real pain…
syysilma on HNhi, the nextjs integration looks all promising. Especially how fast it is integrated. I wonder if there is a smart way to automatically verify a session and get user details on…
chwzr on HN
Maintainers responsive and helpful
From 2 comments
Ory developers emailed me and offered support after I had just expressed interest into the project with someone they know personally - that's a great experience and I have loved…
chrisMyzel on HNThank you for these questions! First of all I want to say that Ory Kratos is built for customer facing authentication first, so many of the enterprise requirements (e.g. LDAP…
claystraw on HN
Objections
Per-user (MAU) pricing of Ory Cloud criticised
From 2 comments
If I have a suggestion for the cloud pricing, I would move away from the per user model that every competitor uses. It is a non-starter for all the B2C startups where a user…
Sytten on HNEverything that is per user is a non-starter in my book. Because the vast majority do 1-2 API calls to login once, are considered active and then never login again during the…
Sytten on HN
Unclear whether self-hosting is fully possible without Ory Cloud
From 1 comment
I found it hard to quickly determine whether Kratos can run completely self-hosted, or that there's always some connection to Ory / Ory Cloud services.
rapnie on HN
Docs and JS SDK are rough and lack documentation
From 1 comment
Been working on a webapp on-and-off using Kratos for a bit and it is a massive relief to be able to delegate the hard parts of authentication to something else. My only real pain…
syysilma on HN
No SAML 2.0 support yet and no enterprise IAM or LDAP
From 2 comments
> - Do you support SAML 2.0 clients? There be dragons. (Disclosure: I work for FusionAuth.) Funny story. We had a client doing a SAML integration using HTTP-redirect bindings. It…
mooreds on HNThank you for these questions! First of all I want to say that Ory Kratos is built for customer facing authentication first, so many of the enterprise requirements (e.g. LDAP…
claystraw on HN
Requests
Clearer pricing and usage-based pricing instead of per user
From 2 comments
MAU pricing is terrible! love this idea. Heads up, I don't quite get this from your pricing page at all right now.. It says "First 900 free" and "First 100 free" without any…
bsid on HNI suggested that because the pricing page said 900 free users and that got me worried. Glad to see you are moving in the right direction! I think you might want to try the API…
Sytten on HN
Better docs and examples combining Kratos and Hydra
From 2 comments
It would be nice if you could get some polish on some no-code examples of kratos and hydra working together, beyond a branch in an example app repository
prpl on HNPretty cool. Just a heads up, the links in the section: "build your own login, registration, account settings, account verification (e.g. email, phone, activate account), account…
mooreds on HN
Multi-tenant support and customizable login flows
From 2 comments
Thank you for working on this interesting open source product. I have some questions: - Is it possible to have multiple organizations in one single instance? Can I have some…
mjepronk on HNPretty cool. Just a heads up, the links in the section: "build your own login, registration, account settings, account verification (e.g. email, phone, activate account), account…
mooreds on HN
Questions
Can it be fully self-hosted without Ory Cloud
From 1 comment
I found it hard to quickly determine whether Kratos can run completely self-hosted, or that there's always some connection to Ory / Ory Cloud services.
rapnie on HN
How does it compare to NextAuth, Keycloak and Passport
From 3 comments
Looks neat. Will definitely check this out. May I know, how is this different from NextAuth?
arbobmehmood on HNDoes passport do something similar?
kovek on HNFor those looking for a comparison, this is like an alternative to KeyCloak, except you have to "bring your own UI" - which I see as a pro, not a con. I've been evaluating Kratos…
joekrill on HN
Does it support SAML and delegation to providers like ADFS
From 1 comment
Thank you for working on this interesting open source product. I have some questions: - Is it possible to have multiple organizations in one single instance? Can I have some…
mjepronk on HN
Alternatives named
NextAuth
From 2 comments
Looks neat. Will definitely check this out. May I know, how is this different from NextAuth?
arbobmehmood on HNI have not used NextAuth, so take my analysis with caution. As far as I can tell, NextAuth is similar to Passport.js as it offers many adapters to sign in with different…
claystraw on HN
Keycloak
From 1 comment
For those looking for a comparison, this is like an alternative to KeyCloak, except you have to "bring your own UI" - which I see as a pro, not a con. I've been evaluating Kratos…
joekrill on HN
Passport.js
From 2 comments
Does passport do something similar?
kovek on HNI thought passport has libraries for the web server also
kovek on HN
Clerk
From 1 comment
Clerk (your profile says you're CTO) has a per-user pricing though? Or are you planning on changing it? > It says "First 900 free" and "First 100 free" without any indication of…
claystraw on HN
Gluu
From 1 comment
What's the diff with Gluu https://gluu.org/ ?
oliveralbertini on HN