Auth0 vs. AWS Identity & Access Management

Great for user authentication and access priviledge management. We are using it for both our commercial and financial clients and Auth0 meets all the regulations and due diligence required to close deals with these enterprise customers. Given their tiered pricing structure, we don't see a scenario where Auth0 would not be appropriate for the solution it provides.

Incentivized

AWS Identity & Access Management is well suited to managing AWS application access between services. Very helpful for both third-party products and in-house developed software. Very happy with how easy it is to create access keys and then share them in our environment. AWS IAM can also be used to manage individual users, but I highly recommend using AWS SSO for that purpose instead. Much easier to deploy for console access and from a security side easier to turn off in one click from your SSO provider.

Incentivized

• RBAC is simple, straight forward and easy to manage
• Integrations of Social Login are simple to configure and the Auth0 documentation shows step by step how to configure it
• Rules/Hooks provide customization to the Auth0 flow, making it a great solution to define how we allow our users to login into our applications

Incentivized

• Customized access per key to limit scope
• Safely distributes access keys
• Provides access audits

Incentivized

• Price point for ALL features can get a bit pricey. But they have a startup plan which helps big time. Developer plans start at $23/mo and do not include all features.
• Actions, rules, hooks, and email customization are great features, but the UI is a bit tough sometimes, not very responsive to screen size and code editors are cut off in a difficult place to maneuver.

Incentivized

• Better integration with roles and policies so you don't need three windows open to create a new IAM user
• Display recommended configurations based on services being used
• Easier options to base config on existing users

Incentivized

For our purposes, Auth0 is still one of the best valued RBAC platforms in the market.

Incentivized

We would be unable to manage the interconnected nature of our AWS services without AWS IAM.

Incentivized

Overall it is a very good authentication platform. It is very intuitive when someone get used to it . The dashboard is clean and most configurations steps are easy to setup. It handles complex authentication flows in a straightforward way. It is just real time detailed analytics logs could be improved.

There isn't a clear method to get a hold of support when trouble arises if you're on their standard plan. You can file a support ticket and they generally are responsive. I've often been able to find similar questions to the questions I've had when it comes to support in their ticket history, however, some have been closed without a satisfactory conclusion for the original poster.

Incentivized

We went with Auth0 over Okta due to price concerns and the overall simplicity of Auth0. We chose Auth0 over Amazon Cognito because Cognito has very poor documentation and client library support. Auth0 offers a service that hits the sweet spot for organizations with small development teams and limited finances.

Incentivized

While we do not use Microsoft Azure for our servers and other customer-facing services. If we did, we would have to use Microsoft Azure Active Directory to manage access to services appropriately. It's difficult to quantify the differences between the services as they are truly different. I would recommend choosing AWS or Azure, then using the identity management provided by the same vendor.

Incentivized

• SAML SSO is a breeze - this alone saves a lot of dev/support hours.
• We are not worried by hackers and chasing security protocols and standards, I guess about half a day job of a developer.
• Telling customers we can connect them with what ever they have whether its social / SAML / OIDC put us in flexible position

Incentivized

• Without IAM, it would be difficult to use AWS across services. Increased ROI

Incentivized