Hacker News new | past | comments | ask | show | jobs | submit login

> It's like all of these password manager tools were created by people who've never seen nor used these existing solutions.

Maybe, but it sounds like your comment was written from a place where you've never had to actually implement one of those existing solutions.

Kerberos is great. It's also a holy terror to implement properly, especially cross-platform, and especially if you need to federate identity.

I've been down that path. While there are trade-offs with any decision, I wholly understand why so many organizations are going to solutions like Okta/Auth0 + Duo + password managers vs the "tried and true" methods of a directory server + Kerberos + SAML federation through Shibboleth

SCIM combined with modern cloud SSO makes life much easier than trying to support Kerberos.




>Maybe, but it sounds like your comment was written from a place where you've never had to actually implement one of those existing solutions.

I absolutely have implemented the aforementioned solution. Used to be a right of passage for middling UNIX syaadmins.

>Kerberos is great. It's also a holy terror to implement properly, especially cross-platform, and especially if you need to federate identity.

Not really, especially not really if you Active Directory.

>SCIM combined with modern cloud SSO makes life much easier than trying to support Kerberos.

SCIM with Active Directory (AKA Kerberos) works well.




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: