Hacker News Reader

Hacker News

Comment by davewritescode | Hacker News Reader

Full thread

davewritescode

I have no idea why anyone would use Cognito unless they don’t care about availability.

Almost every other SaaS vendor supports multi-region active-active and Cognito does not.

View on HN

> Almost every other SaaS vendor supports multi-region active-active and Cognito does not.

Who are we talking about here? Google and Azure?

auth0, okta, ping identity, azure, google

Had some pretty negative experiences with pricing/"enterprise" sales tactics by Okta (which now owns Auth0, and they used the same tactics on both products). I will take AWS pricing shenanigans over that any day.

I'll take the scummy sales tactics over the cognito API any day of the week

Given the choice between a crummy API and being driven bankrupt by a SaaS vendor, I prefer a crummy API. I suppose your calculus might look different if you have a lot of money or an employer with great negotiating leverage.

Okta has been plagued by security issues [1], never heard of Ping Identity, Azure only makes sense if you get a sweetheart deal and are willing to deal with Azure's crap, and I'd never recommend anyone to use anything Google any more.

[1] https://www.flyingpenguin.com/?p=54722

Ping is one of the oldest players in the business, they were founded in 2002 and had one of the earliest identity PaaS in the market (at least as far back as 2012). Haven't used their products much though.

Ping Identity run the largest enterprise identity platforms on the planet after merging with ForgeRock last year. Think HSBC, JP Morgan Chase-scale.

okta is not "active-active" in a multi-region sense, they run in a single active AWS single Region per-tenant. You can pay extra to have a faster failover in a region level failure scenario:

https://support.okta.com/help/s/article/overview-of-enhanced...

What is active-active?

Being live in more than one region at the same time

Reply on news.ycombinator.com