Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by theteapot | Hacker News Reader

Parent Full thread

theteapot·

> Almost every other SaaS vendor supports multi-region active-active and Cognito does not.

Who are we talking about here? Google and Azure?

View on HN

auth0, okta, ping identity, azure, google

Had some pretty negative experiences with pricing/"enterprise" sales tactics by Okta (which now owns Auth0, and they used the same tactics on both products). I will take AWS pricing shenanigans over that any day.

I'll take the scummy sales tactics over the cognito API any day of the week

Given the choice between a crummy API and being driven bankrupt by a SaaS vendor, I prefer a crummy API. I suppose your calculus might look different if you have a lot of money or an employer with great negotiating leverage.

Okta has been plagued by security issues [1], never heard of Ping Identity, Azure only makes sense if you get a sweetheart deal and are willing to deal with Azure's crap, and I'd never recommend anyone to use anything Google any more.

[1] https://www.flyingpenguin.com/?p=54722

Ping is one of the oldest players in the business, they were founded in 2002 and had one of the earliest identity PaaS in the market (at least as far back as 2012). Haven't used their products much though.

Ping Identity run the largest enterprise identity platforms on the planet after merging with ForgeRock last year. Think HSBC, JP Morgan Chase-scale.

okta is not "active-active" in a multi-region sense, they run in a single active AWS single Region per-tenant. You can pay extra to have a faster failover in a region level failure scenario:

https://support.okta.com/help/s/article/overview-of-enhanced...

Reply on news.ycombinator.com