Hacker News Reader

Cognito is a joke. It’s full of bugs, the hosted UI doesn’t support half the features and -- based on the change velocity I’ve seen over the last three years —- it is desperately under-resourced by AWS. The new releases always seem to be small changes (like adding a new OAuth provider) but never fixes for the major bugs.

Anyone who's used cognito knows it's a joke compared to the others.

Azure Active Directory leaves much to be desired.

If it was not a MS product it would struggle to attract a market.

How so? I'd argue they're far ahead of the competition in features.

Except for all the basics like RBAC with multiple roles, JWT modification, simple MFA, etc.

AAD implements SAML, OIDC, SCIM, LDAP, Kerberos, FIDO2 and more. Even if it was not a Microsoft product, it would have better non-proprietary interoperability than most other SSO platforms.