Switching the authentication with a custom provider?

[nevo-david]

Should we switch the current login with something like auth0, clerk, or an open-source provider like Hanko?
I think registration is simple: log in, register, and forget the password.
The problem arises when dealing with SSO.
We can use an authentication provider instead of dealing with SSO and implementing millions of options.
Should we use something else? What do you suggest?

[jamesread]

Interesting question, thansk for putting it here to get inout. I jave run a lot of self hosted projects, and have been building OliveTin for several years, here are the patterns I've seen with a mix of thoughts ;

• Nearly every self hosted project seems to implement username and password login (like Postiz currently does), but a lot of them implement it badly (like just using sha1 hashes for passwords, no password reset etc.
• I actually chose not to implement usernames and passwords for the longest time in OliveTin just because so many people user reverse proxies - it's better that they handle authentication. However I've had long standing requests to implement native usernanes and passwords, because a lot of people don't know how ro setup external auth.
• A lot of people have struggled getting postiz started because it had a lot of dependencies like Cloudflare - keeping basic usernames/passwords is good to get people started quickly.
• I've not used auth0, clerk or Hanko, but in the open source world, Keycloak is exceptionally good.
• Postiz already supports OAuth for google and GitHub, my biggest suggestion would be keeping both of these, and the basic local username and password, but add support for any oauth provider so people could plug in whatever they want of they just have a client secret, app id, redirect Uri, etc.

[nevo-david]

How would you address the SSO part?

[nevo-david]

Ok, When I talked about SSO, I was referring mostly for things like Okta and Authentik

[gmag11]

I use Authentik in my local setup for other services. It may be difficult to setup but when you have it configured it is really comfortable.

[quanganh206]

I think big player like Azure AD is a good option. Most companies in my country use Azure AD.

[nevo-david]

For SSO?