FusionAuth

FusionAuth is the most fully-featured SSO solution for the price

Commentaires : FusionAuth has been really good and from my first experience with v1.15.8, then I upgraded twice to v1.16 then v1.17, they keep adding more features and convenience like making Elasticsearch optional. (I'm still using Elasticsearch though because I'm still migrating from previous identity provider and we have 200,000+ users to migrate, most of them are free users.) The number of free users we have is making it not cost-wise to use other identity provider products. I have successfully integrated FusionAuth with three WordPress instances and a Rocket.Chat instance. I'm excited to complete the migration and use FusionAuth with our own custom apps. I'm also doing consulting with social enterprises / nonprofits and when they need a login/SSO solution for their constituents/donors/volunteers, I can wholeheartedly recommend FusionAuth for them.

Avantages :

* The installation and maintenance process is straightforward, especially that they've provided a Helm chart that can be deployed directly to a Kubernetes cluster. When I first installed it, v1.15.8 required Elasticsearch. But in v1.16.0 and newer, Elasticsearch is optional so it's much easier to get started especially for those with less than 10,000 users. * The functionality is complete. It's amazing how FusionAuth can bundle so many functionality in one software bundle AND also make it relatively easy to install. General SSO, OpenID Connect, SAML, 2FA: all the basics are covered, and more. * Multi-tenant. This is unique with FusionAuth: with a single FusionAuth instance you can service SSO multiple groups or even multiple companies. This can dramatically reduce cost if you're need to share resources. Or perhaps you need separate tenants for staging and development environments, you're not required to buy a separate license for this. * Free license available * Support is good even without an enterprise contact (FusionAuth Forum & GitHub)

Inconvénients :

* MariaDB isn't yet officially supported. It's a minor quibble and is probably irrelevant to most people, but I do wish FusionAuth would have supported this. It's actually possible to run FusionAuth with MariaDB, just that you'll need to be prepared to potential (current and future) issues, that you don't have to worry if you use PostgreSQL or MySQL. * Not open source. Again this is a minor quibble. I'd prefer if FusionAuth open sources or even made "source-available" the core parts of FusionAuth. It'd make problems much easier to debug especially if there are users willing to help debugging. For businesses getting a support contract directly from FusionAuth it's probably not an issue.

Don't make your own auth system ever again. Lean on a toolset that has everything you need built in!

Commentaires : Very easy to get started. Used a container image to setup a test environment. Microsoft (netcore) already has an integration with OAuth2/Openidconnect --- so we just had to taylor it the way we wanted in our own application. The docs are very clear / clean. The forums are active. I had suggested a very simple feature, and it was put into a released version 2 days later. We are not even a paying customer yet. That was very revealing that this is an active product, and the feedback was valuable.

Avantages :

While evaluating different auth systems, we found ourselves scratching our heads about how we would accomplish certain integration points. Options for self-hosting, options for cloud & on-prem applications, custom data and if we have to host a side-by-side database. We wanted to tie all our our separate container applications running out there, into a single sign on, with minimal work. The APIs were very clear, and easy to understand while implementing. We love the transparency of the github repos, so we can comb through the code to see what was being done while doing the integration. In a short 1-2 months of work, we were able to learn about how (with no Oauth/OpenID Connect experience) to integrate our applications in using the standards. FusionAuth has some nice escape hatches for additional information such as their Lambda support and data objects on each entity so you can store arbitrary data for future usages.

Inconvénients :

Some of the generated SDKs could benefit from a developer that uses the technology suchs as dotnet/core, where the sdks could be better fit to conform to that development standard, but it wasn't a blocking issue. Just using objects that are camel case is kinda foreign, as if you are using java. But this is about as bad as it gets -- it worked as expected without having us spend a ton of time troubleshooting anything.

Review

Avantages :

Ease of use. Easy to setup. Customisable. Open source.

Inconvénients :

Fast moving. Hard to upgrade. Clients are a bit buggy

Feature-packed and easy to integrate

Commentaires : Overall, we feel we've gotten value out of FusionAuth and are happy to be using it. There are some things we've had to work around (like the CI/CD concepts discussed in the cons), but we've been happy with the performance and low maintenance of the solution that this hasn't really affected us too much.

Avantages :

FusionAuth is API-driven which allows custom authentication flows to be done simply in little time. The whole solution feels well-designed and the team is quick to resolve issues and meet community demands for features as needed.

Inconvénients :

The CI/CD-based configuration utilities for FusionAuth aren't quite as great as we'd like. They offer a solution for standing up an environment through configuration (Kickstart), but not ongoing configuration, which means if settings are changed in the live environment they aren't peer-reviewed like what we had with Auth0's Terraform provider.

A fantastic auth provider

Commentaires : The team are really responsive, the software has been rock solid and is really quick. It has all the majors features you want and need and the documentation is fantastic!

Avantages :

The ease of use, the fact it's got a really great billing model, compared to something like Auth0 it's dirt cheap and much better in my opinion. This is the best auth provider by FAR which gives you so much out of the box for free.

Inconvénients :

Not much. The team is super responsive and some of my requests have already been implemented.