robotdan

Ha.. got a good laugh.

Running FusionAuth in Docker or Kubernetes is a huge benefit to those running on premise.

> We ended up cancelling it as it did not seem to offer any value whatsoever and was crazy expensive for our 300-odd users.

When you canceled Okta, did you build it in house, or was the AWS Cognito / AWS solution the replacement?

Did you look at anything on-prem like Keycloak or FusionAuth?

Keycloak seems to be a pretty good on-premise option. Hard to know what will come of it now that IBM bought RedHat.

If on-premise is a requirement, you may want to look at FusionAuth. On premise, runs on Mac, Linux, Windows, Docker, and Kubernetes. This should check all of your boxes, installs in a few moments with the fast path install or docker-compose up. https://fusionauth.io/

Another round! OneLogin raises another $100 million in Series D. https://venturebeat.com/2019/01/10/onelogin-raises-100-milli...

Wow, I guess I should not be surprised. The acquisitions continue - in the last year or two we've seen the identity space really start to consolidate.

- Okta bought Stormpath .. and killed it. - SAP bought Gigya - Thoma Bravo acquires majority interest in Centrify - Google Cloud acquires Bitium - Akamai bought Janrain - LoginRadius - Series A from M12 (Microsoft Venture Capital) - OneLogin - parternship with Microsoft

I think there are others as well, I'm surprised IBM didn't buy Janrain. Waiting to see who picks up ForgeRock, FusionAuth and Auth0. Most of these companies have taken so much in VC that they will be pricey to buy.

My guess is that Google, Amazon, and maybe IBM want to have a market position in this space, so it will be interesting to see what they do. Amazon already has a decent position with Cognito, Google offers some of this if you're on Firebase. IBM seems to be absent - but they have a lot of catching up to do in general, so perhaps this isn't priority.

I always feel you're giving up some security when you go mutli-tenant saas. But the convenience is hard to beat.

Also, I find it is getting more difficult to even find software that can be installed and managed locally. I think there is still a decent market for security software running local and not pushing it out to the "cloud".

Is this built for Python 2 or 3?

Thanks, that answers my question.

Is this an OpenID Connect integration and does it support RBAC?

The comparison says on-premise, does that mean you can run in a docker container?

What do you think about MFA, password-less SMS or email based login. It seems there are a lot of varying opions on the topic.

This could be an additional topic to add to your guide. Thanks.

What is FusionAuth? Is this like an Auth0 or something like that?

If anyone is looking to test out their own impl or a third party, this web based JS impl allow you to set up and test with a secret and a 6 digit OTP.

https://github.com/inversoft/prime-two-factor/tree/master/we...

If you're a dev, there are a lot of implementations, or code examples online.

Here is an open source Java example of some of the algorithm impl, and an HTML / JS example to test out in the browsers.

https://github.com/inversoft/prime-two-factor/blob/master/sr... https://github.com/inversoft/prime-two-factor/tree/master/we...

For a lighter take on a Friday, read how Site-Lokd™ brewery technology solves GDPR crisis: https://www.inversoft.com/blog/2018/05/16/site-lokd-brewery-...

Enjoy.

Ha, this is great.

This is about as effective as Microsoft turning off internet access through IE unless you specifically approve each address.

If I could run this in docker - then we'd really have something.

Ha, this is great. This will be as effective as Beer websites asking if you're 21 before you enter.

May be interesting to add different competition modes.

One of which could be a one time group competition.

For example, an office competition, a goal is set by the competition owner, they set the prize amount, % that goes to charity, % that goes to the winner.

They invite the participants and set the duration of the event.

Lots of companies have programs as part of their benefits to encourage exercise, etc. You could partner with benefits companies to set up the competitions for their clients.

You'd think we'd have learned by now.

Anyone know if Stormpath is providing professional services to help with migration to Okta?

Good timing in light of the Okta Stormpath announcement.

What are the on premise alternatives? Not sure I want to move all my users to Okta just get burned again with a deprecated cloud API.

You had me at anal leakage.

Oh, this is about security. :-)

Ha - you could be right. I may have jumped to a conclusion.

fair point.

There is probably some truth to this, but I don't know the answer is to allow weak passwords. Every company I've ever worked for enforced some sort of minimum password requirements.

What I do find to be a PITA is when you attempt to create a password that does not meet the minimum rules and the error message gives you no indication of what you need to change to meet the requirement.

The first gif on that page, Derek Zoolander's famous look. http://www.urbandictionary.com/define.php?term=blue%20steel

Even Blue Steel?! :-)