Hacker News Reader

Comment by aeneas_ory | Hacker News Reader

Founder / project creator here. Ory Kratos has been in development since 2018 and is approaching version 1.0! If you have any questions about the project, tech, flows, or Ory as a whole I’m here to help :)

View on HN

Is this an alternative to Keycloak? One thing Keycloak supports is the ability to create multiple realms in order to use one instance for different groups of users and applications. Does Kratos support something like that?

Isn't that aspect of Keycloak a carryover from the days when one VM held one instance of an application? These days containers are cheap and you can just spin up each "realm" in another container.

Just because you can architecturally do that today, doesn't mean that you have to and that everyone does.

I do run Keycloak in a container but I'm pretty sure spinning up a new instance for every realm would be more resource intensive than using multiple realms in the same instance.

It's just a question of use case at the end of the day. In my use case I only need this for small internal tools so it's easier to just spin up one instance for me.

Their recommendation for multitennancy is to create a db schema per realm and spin up separate instances

Just curious, when will it get LDAP/AD Connectivity? I saw here https://www.ory.sh/comparisons/ory-vs-keycloak/ that it doesn't have this feature

LE: I guess it's being tracked in this GitHub issue: https://github.com/ory/kratos/issues/274

What's left before you'll be ready to release 1.0 and how will the project change once you've reached that milestone?

Check out the milestone on github: https://github.com/ory/kratos/milestone/15

not sure if that is everything.

Reply on news.ycombinator.com