Hacker News Reader

Be it Keycloak, Gluu, FusionAuth - I’m in total agreement to pull user management out of your app - even if you are a keeping things as simple as a rails monolith.

The cognitive overload of having to align PM’s, ops, internal support, etc with a custom solution is worth any of the downsides.

If you’d sat through any sprint planning or architecture exercise in a sizable org for auth, these can be a magic wand.

View on HN

> The cognitive overload of having to align PM’s, ops, internal support, etc with a custom solution is worth any of the downsides.

That's a great point. You can just point at the IdP and say "this is what a user is, this is what a group is" and have the discussion wrapped up quickly. You're basically front-loading the user entity definition discussion to the evaluation phase (or, if your org has already chosen, offloading it to previously vetted solutions).

Reply on news.ycombinator.com