Keycloak is a big complex java app that does everything in one service, clustering and everything, all kinds of plugins and stuff you can make it do what you want at a price.
WorkOS has messed up SCIM integrations for us/our customers serveral times, and now with agentic stuff I'd just build out SCIM support myself (done it pre agents so maybe not for everyone), they're also kinda expensive and have hard lockin since they're not going to hand out your customer SAML/SCIM/whatever configs and password hashes.
Ory's got a nice cloud offering (only used it self hosted) but the whole stack is there and it's IMO easier to understand than keycloak (and you probably don't want to build your own)
I would also rather admin/bug fix/operate a go service than a java service (personally). Keycloak is not terrible though you have enough rope to really get yourself in a bind.
Ory Kratos has a password migration hook that lets you migrate password credentials out of anything (including Cognito) without password resets.
I believe most other (modern) auth vendors have an equivalent.
I really don't see any reason to be using Cognito in $currentyear.
Auth0 will run an export for you, but you have to file a support ticket for them to do it, and it may take them a bit of time, so you may end up with some users who get reset to a slightly old password (if they change it between the export and your import) or if you get a new registration.
Given all the pain I've suffered working with both cognito and auth0, I can't imagine a reason for using either in $currentyear.
Yea I went through this as well - when I tested it, they also required you be on a paid plan to even be able to get the export, which is kinda crazy. I work at an auth company now (Clerk) and this experience drove our current approach, which is that you can instantly export all your user data through a button in the dashboard. Maybe it's not as "sticky", but I think respecting your users when they want to get their data or migrate off is way more important.
Yup for the Ory managed service (Ory Network) you can export all data through the admin API including hashed passwords.
Of course when self-hosting Ory you have full control over the database as well.
in most cases you dont need explicit permission but you need to sign a CLA (Individual Contributor License Agreement) - which kind of includes permission
There's no need for abusive CLAs to do that, DCO (Developer Certificate of Origin) plays this role already. You have to state that you have the right to use what you're trying to contribute.
Coming from Germany I found it funny how tiny the subway lines are in major cities in the US compared to medium-sized cities here.
I always thought Germany was a country centered a lot around cars but it was so much more extreme in the states; seemed not possible to live in a city(!) without a car.
Depends on the city. In LA, yes it’s very hard to live without a car. I live in Seattle and I live car free as well as many of my friends. It’s not that we can’t afford it, we’ve just built our lives around transit and biking and the city is pretty good for it. Then of course there’s NYC, which is likely better than most European cities for transit. But you’re right that the average here is far far worse when it comes to transit and living car free or car lite.
In the states if you want to live car free you can but you need to be strategic in where you live within a city. I have lived in a few from east to west coast, suburbs to urban. By selecting your place in a city carefully you can go car free or mostly car free.
Even in LA it's quite possible to live without a car if you live in the right neigbhorhoods like K-Town or any other centrally located one where both the Metro and buses are plentiful. LA's a huge place with varying amounts of density.
This. I’ve lived in both Seattle and LA. LA was significantly faster and easier to get to destinations than it ever was in Seattle. Unless you actually live in LA and use the transit, a lot of outsiders will always default to “LA transit bad” which is far from the reality.
Seattle was the worst city I’ve ever lived in and not owned a vehicle. It actually made me appreciate Portlands transit even more given the size of the region. LA has even more reliable transit than both, despite how prevalent and necessary most times a vehicle is in SoCal. In LA I was able to get around quickly and further with no drama. Seattle transit I know has been improving, but your routes, frequency, and speeds made me want to pull my hair out. This is also as someone who lived in Capitol Hill which is apparently the transit heaven of Seattle.
Interesting! How long ago was that? Seattle has higher transit ridership than both those cities and is rapidly expanding its transit system. I believe we are still leading the pack in transit ridership growth yoy. Maybe you were here before it got good? I’ve only lived here 5 years.
Pre pandemic. Seattle has more riders than Los Angeles? That’s…not right? I recall needing to rent a car to get nearly anywhere around Seattle, like if I wanted to get from home in Capitol Hill to Golden Gardens, that’s nearly an hour to go 8mi with multiple transfers. The issue with Seattle is it’s a small city with a giant body of the water in the middle of it, with not many bus lanes or hard rail.
Conversely, you can get from downtown LA to Santa Monica in the same amount of time, which is nearly twice the distance, direct. This was not to cherry pick a route either, just a popular dense neighborhood to somewhere scenic.
Sorry, I meant ridership per capita. In Seattle about 15% of people commute via transit (and I believe it’s the fastest increasing in the country), but LA is 6% and flat.
Seattle’s geography is conducive to transit, because there are many bridges where all traffic is constricted. That means point to point trips by car are often taking a similar route to buses. It also restricted the city’s ability to sprawl (although even suburban Bellevue is above LA at 8%).
The standard of service for nearly every bus line that operates in Seattle is 15 minutes frequency, even on weekends. Many lines operate every 10, and the new G Line that opened last year in fully dedicated bus lanes runs every 6!
I lived in Silicon Valley without a car for 2 years. Commuted between Palo Alto and Santa Clara by Caltrain commuter rail. Took the local bus system frequently. Rented a car occasionally. It can be done but it's not easy.
