OneLogin Outage | Hacker News Reader

OneLogin Outage

onelogin.com

31 pointsdoubled11215 comments

Open articleView on HN

This might be a good opportunity to check out some self-hosted and open source competitors:

- The Ory Ecosystem: https://github.com/ory

- KeyCloak: http://keycloak.org

- Authelia: https://github.com/authelia/authelia

My favorite in this space is authentik. It manages to have more features than most while being easier to use.

https://goauthentik.io/

Seconding Keycloak. It has a steep learning curve to get started, but it's rock solid for production use.

Love Ory. More Ory.

The only status I got was by email. "Degraded Performance" is an understatement when nobody is able to connect. --- Status update from OneLogin regarding Portal, Single Sign-On Service in US Operating Region

Message: OneLogin Engineers have identified an issue with Single Sign-On Services, some customers may be unable to reach their portal. We are working to quickly restore service.

Current Status: Degraded Performance Started: April 26, 2022 9:59AM PDT Resolved:

Affected Infrastructure Components:Portal, Single Sign-On Service Locations:US Operating Region

Words like "some customers", "degraded performance", and "increased response times" are frustrating in situations where it's clearly not doing anything useful for anyone. They aren't technically untrue, but they are not helpful.

OneLogin is having issues with SSO and the portal, although it is unconfirmed on this status page at the moment.

At time of writing, their status page now appears to be nonfunctional.

I wonder what login system they use to login to their status page. :P

https://status.io/pages/538511e2ce5cb97537000144

> The Status page relies on one of our affected services and some customers would not be able to access the page or view updates. We will continue to provide regular status updates via email.

OneLogin? More like ZeroLogin, amirite?

Secuirty can't be breached if no one can log in...

Unless, of course, security was already breached and that is why no one can log in.

Found this on Reddit https://status.io/pages/538511e2ce5cb97537000144

We are getting the following message on our login portal: "Validation Error: Validation failed: There was a problem decrypting the secret. Response status: 400."

Reply on news.ycombinator.com