FusionAuth

FusionAuth is the most fully-featured SSO solution for the price

Kommentare: FusionAuth has been really good and from my first experience with v1.15.8, then I upgraded twice to v1.16 then v1.17, they keep adding more features and convenience like making Elasticsearch optional. (I'm still using Elasticsearch though because I'm still migrating from previous identity provider and we have 200,000+ users to migrate, most of them are free users.) The number of free users we have is making it not cost-wise to use other identity provider products. I have successfully integrated FusionAuth with three WordPress instances and a Rocket.Chat instance. I'm excited to complete the migration and use FusionAuth with our own custom apps. I'm also doing consulting with social enterprises / nonprofits and when they need a login/SSO solution for their constituents/donors/volunteers, I can wholeheartedly recommend FusionAuth for them.

Vorteile:

* The installation and maintenance process is straightforward, especially that they've provided a Helm chart that can be deployed directly to a Kubernetes cluster. When I first installed it, v1.15.8 required Elasticsearch. But in v1.16.0 and newer, Elasticsearch is optional so it's much easier to get started especially for those with less than 10,000 users. * The functionality is complete. It's amazing how FusionAuth can bundle so many functionality in one software bundle AND also make it relatively easy to install. General SSO, OpenID Connect, SAML, 2FA: all the basics are covered, and more. * Multi-tenant. This is unique with FusionAuth: with a single FusionAuth instance you can service SSO multiple groups or even multiple companies. This can dramatically reduce cost if you're need to share resources. Or perhaps you need separate tenants for staging and development environments, you're not required to buy a separate license for this. * Free license available * Support is good even without an enterprise contact (FusionAuth Forum & GitHub)

Nachteile:

* MariaDB isn't yet officially supported. It's a minor quibble and is probably irrelevant to most people, but I do wish FusionAuth would have supported this. It's actually possible to run FusionAuth with MariaDB, just that you'll need to be prepared to potential (current and future) issues, that you don't have to worry if you use PostgreSQL or MySQL. * Not open source. Again this is a minor quibble. I'd prefer if FusionAuth open sources or even made "source-available" the core parts of FusionAuth. It'd make problems much easier to debug especially if there are users willing to help debugging. For businesses getting a support contract directly from FusionAuth it's probably not an issue.

Don't make your own auth system ever again. Lean on a toolset that has everything you need built in!

Kommentare: Very easy to get started. Used a container image to setup a test environment. Microsoft (netcore) already has an integration with OAuth2/Openidconnect --- so we just had to taylor it the way we wanted in our own application. The docs are very clear / clean. The forums are active. I had suggested a very simple feature, and it was put into a released version 2 days later. We are not even a paying customer yet. That was very revealing that this is an active product, and the feedback was valuable.

Vorteile:

While evaluating different auth systems, we found ourselves scratching our heads about how we would accomplish certain integration points. Options for self-hosting, options for cloud & on-prem applications, custom data and if we have to host a side-by-side database. We wanted to tie all our our separate container applications running out there, into a single sign on, with minimal work. The APIs were very clear, and easy to understand while implementing. We love the transparency of the github repos, so we can comb through the code to see what was being done while doing the integration. In a short 1-2 months of work, we were able to learn about how (with no Oauth/OpenID Connect experience) to integrate our applications in using the standards. FusionAuth has some nice escape hatches for additional information such as their Lambda support and data objects on each entity so you can store arbitrary data for future usages.

Nachteile:

Some of the generated SDKs could benefit from a developer that uses the technology suchs as dotnet/core, where the sdks could be better fit to conform to that development standard, but it wasn't a blocking issue. Just using objects that are camel case is kinda foreign, as if you are using java. But this is about as bad as it gets -- it worked as expected without having us spend a ton of time troubleshooting anything.

Review

Vorteile:

Ease of use. Easy to setup. Customisable. Open source.

Nachteile:

Fast moving. Hard to upgrade. Clients are a bit buggy

Feature-packed and easy to integrate

Kommentare: Overall, we feel we've gotten value out of FusionAuth and are happy to be using it. There are some things we've had to work around (like the CI/CD concepts discussed in the cons), but we've been happy with the performance and low maintenance of the solution that this hasn't really affected us too much.

Vorteile:

FusionAuth is API-driven which allows custom authentication flows to be done simply in little time. The whole solution feels well-designed and the team is quick to resolve issues and meet community demands for features as needed.

Nachteile:

The CI/CD-based configuration utilities for FusionAuth aren't quite as great as we'd like. They offer a solution for standing up an environment through configuration (Kickstart), but not ongoing configuration, which means if settings are changed in the live environment they aren't peer-reviewed like what we had with Auth0's Terraform provider.

Great CIAM

Kommentare: Working in a non-profit research field, we often need to quickly set up prototypes of web applications and services. FusionAuth helps us saving a lot of time while giving a smooth and safe user experience.
The availability of a free community version is very important for us, since it is not easy to justify the costs for such prototypes in advance. Then, if they become products, somebody will likely buy the support for FusionAuth and other components.

Vorteile:

Apart from the top level support for OpenID and OAuth2.0 standards, we like the ease of deployment and the high number of clients available that make it easy to develop with FusionAuth. Furthermore, the possibility to customize the tenant UI produce a smooth UX.

Nachteile:

The suite has a lot of features, and the team is constantly working on improvements. Multi-Tenant SSO and iframe token refresh for implicit-grant, which currently are not supported, would be the cherry on the cake. The logging can be made a bit more verbose in order to quickly debug issues.

A fantastic auth provider

Kommentare: The team are really responsive, the software has been rock solid and is really quick. It has all the majors features you want and need and the documentation is fantastic!

Vorteile:

The ease of use, the fact it's got a really great billing model, compared to something like Auth0 it's dirt cheap and much better in my opinion. This is the best auth provider by FAR which gives you so much out of the box for free.

Nachteile:

Not much. The team is super responsive and some of my requests have already been implemented.

Customizable, well documented, full of features, and inexpensive

Vorteile:

FusionAuth is very customizable thanks to the templating system used. It is the thing that I found to be the killer feature when compared with the others. There are multiple deployment options including free of charge on-premise one while there is still an option to have SaaS and paid support. This is a commercial product but developed a lot like the open-source one (Github issues) which is great giving direct contact with the FA people and the option to vote for the most wanted features. FusionAuth support is awesome.

Nachteile:

There is no dedicated JavaScript library/client that can help with the SPA integrations but this can be done using some other available tools/libraries.

FusionAuth is Fantastic

Kommentare: We use FusionAuth as our Auth layer and we have had a lot of success integrating it into on-prem deployments with other IdP's.

Vorteile:

It is very customizable. It is lightweight. The support is the best of any vendor we use. It integrates into other platforms easily. The docs are generally very good, especially considering how often the software is updated.

Nachteile:

There are some minor features I would like to see, such as ActiveDirectory groups mapping to roles in FusionAuth, but it may be possible to do this already. I wish there was better native Kubernetes support.

Great product overall

Kommentare: Pretty good

Vorteile:

The easy to use and easy to setup, the admin portal and the user interface are pretty good. Along with this, all the great features that are present to integrate and built authentication service.

Nachteile:

Lack of multi tenant features. Ability to add custom roles where user is only a tenant admin

A brilliant solution to a common problem

Kommentare: We're using a monolithic approach to manage our current 300K users with simple identity management and we're rebuilding our architecture to put an Identity/Token management system in the middle and build several microservices around it. I’ve been scratching my head to implement IdentityServer4 into our new architecture until I discovered FusionAuth. I’m not upset about the time we spent with IS4 & .net Core Identity; they sky-rocketed our domain expertise. However, FusionAuth is the tool, and I'm a bit surprised to see how they managed to make it easy on a sketchy topic like identity management and tokenization.

Vorteile:

Easy to use, and almost zero time to use the product with a line of code to grab and start docker containers. Once the apps are up, it literally takes 5 minutes to set up a working Identity Management system with security proven protocols support out of the box. The overall management interface is pretty straight forward, and easy to understand. They have great documentation as well to support you along the way.

Nachteile:

Theme management is still in its early steps and I believe they will come up with something more robust. Even the current version of 1.x has a superior management interface than the competition.

An easy to use and yet powerful multi-tenant self hosted authentication service

Kommentare: Our overall experience with FusionAuth has been truly positive. FusionAuth had everything we were looking for from an authentication service and therefor it helped us save countless work hours implementing our own solution.

Vorteile:

Integrating with our software was relatively simple thanks to the versatility offered by FusionAuth's multi-tenant feature. And thanks to the great online community we were able to overcome almost every issue we encountered since day one.

Nachteile:

It may be because of our use case being so different from what FusionAuth is normally used but we would love if its performance was improved specially the memory usage.

Facil de usar, rapido e intuitivo

Kommentare: Pudimos agregar rápidamente un sistema de autenticación a un nuevo proyecto de comercio electrónico y centralizar los inicios de sesión en varias aplicaciones desarrolladas recientemente. Esto nos permite proporcionar un inicio de sesión único simple y asequible para múltiples sitios web de una manera altamente segura. También nos permite agregar fácilmente Facebook/múltiples inicios de sesión sociales a nuestro sitio web de forma gratuita.

Vorteile:

Me gusta la facilidad de instalación e integración con aplicaciones personalizadas. También me gusta que tenga licencia gratuita con Community Edition, lo que la convierte en una solución rentable para nuevas empresas y pequeños proyectos sin presupuesto. Esta es una gran solución para cualquier persona que necesite autenticarse en un solo proyecto o en múltiples proyectos que requieran un inicio de sesión único e identidad centralizada. También proporciona una capa adicional de seguridad para las aplicaciones, separando la autenticación y la autorización del propio código de la aplicación.

Nachteile:

El costo de pasar a una versión paga es simplemente demasiado alto para una startup, especialmente un modelo autohospedado. Afortunadamente, la capacidad de la versión comunitaria es muy fuerte.

You guys make my life easier

Kommentare: I really like the UI (except for Freemarker templating) and the Documentation is just awesome.
Being part of the Slack-Channel is great and people there (especially robotdan) are really responsive.

Vorteile:

- Documentation. - Easy configuration trough a well-designed UI. - Adding Social Logins is a no-brainer. - It even suits the needs of very small projects. - Docker-Configration is easy and update procedure painless - Its free without the support. Still i get support on the slack-channel and therefore writing bug-reports and feature-requests is something i can give back.

Nachteile:

Templating (both UI and Emails) is a pain. But it's not an easy task to make it better. At least it works most of the time and is better than other solutions I know.

Best Opensource Auth System out there.

Vorteile:

The biggest impact for me has been an immediate understanding of the way the system works, and indeed auth software should work. All the examples are clear, concise and above all actually work! The support via their slack channel is just awesome, they've never let me down. Great product, great company, and above all amazing people.

Nachteile:

Nothing springs to mind, but the distinction between tenant settings and user settings can be a little confusing at first.

good keycloak alternativ

Kommentare: So far I'm fine :) I did not use FusionAuth on production yet, but going to investigate this opportunity. I believe it may be great piece of software to bootstrap your new services in the internet and be concentrated on the business logic, at the same time being confident that you use top auth technologies.

Vorteile:

I like that FusionAuth popped up on the market, because until today there was only one major player - keycloak. Documentation is complete and good, I have experience contacting the developers, they answer quickly and passionately. Fact that FusionAuth is provided as SaaS from IBM also says something to me. Interface is quite fresh, I like this also. API is consistent.

Nachteile:

- To be honest, I'm not a fan that this is another Java enterprise application; - I know that keycloak is backed by Apache and is open source, so I believe that it'll continue to exist. I don't know the backers of FusionAuth so far and it's plans for the future.

Simplest IAM software for our use-case

Kommentare: Surprised in good. It took some time to master it but now we feel good.

Vorteile:

* authorization features * permissions management * almost ready-to-use helm chart at the time we tried * json kickstart is perfect * no need for elasticsearch

Nachteile:

* unable to export the fusionauth config to json so that I can use it as a kickstart * difficult to deploy on k8s if we really need to expose it (we did not succeed in that; however it's no problem for us, because we don't expose fusionauth any more)

Great hosted IAM solution

Kommentare: I was able to get FusionAuth up and running immediately and without problems for testing. Production deployment with AWS ECS, RDS, ES, and ELB was very quick too. I haven't used it at scale yet, but I'm fairly confident it will handle scale given its architecture.

Vorteile:

Free, full-featured, very easy to test locally via Docker and deploy and scale in AWS with ECS, RDS, ES, and ELB, good documentation and excellent support via Slack

Nachteile:

Interface could be more intuitive and being Java/Tomcat-based makes it a little bloated

Single solution of Authentication

Kommentare: Good.

Vorteile:

* Easy integration of oauth2. * Central authentication mechanism for multiple application * Excellent API support 👍 * Multiple sign mechanism like google, external jwt, facebook .... * Performant. didn' t check at huge user base

Nachteile:

*Default UI provided for login. Would appreciate if you can have materail like UI which is trending. I think you tried to match with Admin portal theme. But it is OK to have differnt look for login so that we don't have to do much customization * Missing Linkedin sign option * Sample application in every client platform like c#, java, javascript (node and angular). A kind of guided by example

Great Application

Kommentare: Our company decided to implement FusionAuth to resolve some specific authentication challenges and provide the maximum flexibility for our platform as it evolves. The FusionAuth team has been fantastic in providing us with advice and support when needed, and receptive to new ideas to consider for future updates. We have no regrets about choosing FusionAuth as our authentication provider.

Vorteile:

Integration with our existing services was fairly painless, given we were replacing another authentication engine.

Nachteile:

We have had a positive experience with the product.

Recon InfoSec

Kommentare: Love it so far, works great, would recommend

Vorteile:

Ease of implementation Security Stability Well documented Robust API Passwordless login/magic link MFA Responsive and helpful support/dev team

Nachteile:

UI is not immediate intuitive in some cases, like roles and permissions, but docs are great Would love a feature similar to Okta's SWA for applications that still don't have SAML or OAuth

Startup use of FusionAuth

Kommentare: The best thing about FA (other than the freemium model) is the support. The support team is first rate.

Vorteile:

I mostly use the passwordless login. It has taken me considerable time to implement due to my "part time" status as a developer.

Nachteile:

The documentation for the php API could use some upgrading, IMO.

Compact and complete platform

Kommentare: Support is fast and responsive. A platform to watch

Vorteile:

Very solid platform, easy to run and install. Feels light weight in usage, but misses no feature.

Nachteile:

None, excellent platform. Nothing to complain

Identity Management for NextGen Apps

Kommentare: Before FusionAuth, we were using our own built-in Identity Management using DB and Code. However, as we grew with our user requirements, log in with Social Identity was one thing, users even asked for an Email/Password-based credential mechanism which was not existing up until now. Now while revamping our entire WebApp, we have plugged in FusionAuth for Authentication and even the App is able to use them. Best is they update the Code regularly. Amazing!

Vorteile:

Since we build lots of stuff using .Net and FusionAuth has the simplest of ways to get deployed on an Ubuntu Server. Just one line and it will be installed easily.

Nachteile:

I wish I could even have Identity Validation for Mobile Number Users and not just Emails.

Best Auth System

Kommentare: So much better than Auth0

Vorteile:

Good docs, integrates well into CICD, good support, good free tier, sensible paid options

Nachteile:

I wish they'd open source the core. It lacked passwordless SMS out-of-the box.

Great solution to do away with boilerplate authentication code!

Vorteile:

A free, cross platform, and API centric solution to avoid writing the same boilerplate authentication code is an awesome thing!

Nachteile:

I think documentation, client libraries, and examples could be more flushed out, but they are still very useful regardless.