FusionAuth Erfahrungen

* The installation and maintenance process is straightforward, especially that they've provided a Helm chart that can be deployed directly to a Kubernetes cluster. When I first installed it, v1.15.8 required Elasticsearch. But in v1.16.0 and newer, Elasticsearch is optional so it's much easier to get started especially for those with less than 10,000 users.
* The functionality is complete. It's amazing how FusionAuth can bundle so many functionality in one software bundle AND also make it relatively easy to install. General SSO, OpenID Connect, SAML, 2FA: all the basics are covered, and more.
* Multi-tenant. This is unique with FusionAuth: with a single FusionAuth instance you can service SSO multiple groups or even multiple companies. This can dramatically reduce cost if you're need to share resources. Or perhaps you need separate tenants for staging and development environments, you're not required to buy a separate license for this.
* Free license available
* Support is good even without an enterprise contact (FusionAuth Forum & GitHub)

* MariaDB isn't yet officially supported. It's a minor quibble and is probably irrelevant to most people, but I do wish FusionAuth would have supported this. It's actually possible to run FusionAuth with MariaDB, just that you'll need to be prepared to potential (current and future) issues, that you don't have to worry if you use PostgreSQL or MySQL.
* Not open source. Again this is a minor quibble. I'd prefer if FusionAuth open sources or even made "source-available" the core parts of FusionAuth. It'd make problems much easier to debug especially if there are users willing to help debugging. For businesses getting a support contract directly from FusionAuth it's probably not an issue.

While evaluating different auth systems, we found ourselves scratching our heads about how we would accomplish certain integration points. Options for self-hosting, options for cloud & on-prem applications, custom data and if we have to host a side-by-side database. We wanted to tie all our our separate container applications running out there, into a single sign on, with minimal work. The APIs were very clear, and easy to understand while implementing. We love the transparency of the github repos, so we can comb through the code to see what was being done while doing the integration. In a short 1-2 months of work, we were able to learn about how (with no Oauth/OpenID Connect experience) to integrate our applications in using the standards. FusionAuth has some nice escape hatches for additional information such as their Lambda support and data objects on each entity so you can store arbitrary data for future usages.

Some of the generated SDKs could benefit from a developer that uses the technology suchs as dotnet/core, where the sdks could be better fit to conform to that development standard, but it wasn't a blocking issue. Just using objects that are camel case is kinda foreign, as if you are using java. But this is about as bad as it gets -- it worked as expected without having us spend a ton of time troubleshooting anything.

FusionAuth is API-driven which allows custom authentication flows to be done simply in little time. The whole solution feels well-designed and the team is quick to resolve issues and meet community demands for features as needed.

The CI/CD-based configuration utilities for FusionAuth aren't quite as great as we'd like. They offer a solution for standing up an environment through configuration (Kickstart), but not ongoing configuration, which means if settings are changed in the live environment they aren't peer-reviewed like what we had with Auth0's Terraform provider.

Apart from the top level support for OpenID and OAuth2.0 standards, we like the ease of deployment and the high number of clients available that make it easy to develop with FusionAuth. Furthermore, the possibility to customize the tenant UI produce a smooth UX.

The suite has a lot of features, and the team is constantly working on improvements. Multi-Tenant SSO and iframe token refresh for implicit-grant, which currently are not supported, would be the cherry on the cake.
The logging can be made a bit more verbose in order to quickly debug issues.

The ease of use, the fact it's got a really great billing model, compared to something like Auth0 it's dirt cheap and much better in my opinion. This is the best auth provider by FAR which gives you so much out of the box for free.

Not much. The team is super responsive and some of my requests have already been implemented.

Easy to use, and almost zero time to use the product with a line of code to grab and start docker containers. Once the apps are up, it literally takes 5 minutes to set up a working Identity Management system with security proven protocols support out of the box.

The overall management interface is pretty straight forward, and easy to understand. They have great documentation as well to support you along the way.

Theme management is still in its early steps and I believe they will come up with something more robust. Even the current version of 1.x has a superior management interface than the competition.

Integrating with our software was relatively simple thanks to the versatility offered by FusionAuth's multi-tenant feature.

And thanks to the great online community we were able to overcome almost every issue we encountered since day one.

It may be because of our use case being so different from what FusionAuth is normally used but we would love if its performance was improved specially the memory usage.

Me gusta la facilidad de instalación e integración con aplicaciones personalizadas. También me gusta que tenga licencia gratuita con Community Edition, lo que la convierte en una solución rentable para nuevas empresas y pequeños proyectos sin presupuesto. Esta es una gran solución para cualquier persona que necesite autenticarse en un solo proyecto o en múltiples proyectos que requieran un inicio de sesión único e identidad centralizada. También proporciona una capa adicional de seguridad para las aplicaciones, separando la autenticación y la autorización del propio código de la aplicación.

El costo de pasar a una versión paga es simplemente demasiado alto para una startup, especialmente un modelo autohospedado. Afortunadamente, la capacidad de la versión comunitaria es muy fuerte.

I like that FusionAuth popped up on the market, because until today there was only one major player - keycloak. Documentation is complete and good, I have experience contacting the developers, they answer quickly and passionately. Fact that FusionAuth is provided as SaaS from IBM also says something to me. Interface is quite fresh, I like this also. API is consistent.

- To be honest, I'm not a fan that this is another Java enterprise application;
- I know that keycloak is backed by Apache and is open source, so I believe that it'll continue to exist. I don't know the backers of FusionAuth so far and it's plans for the future.

Free, full-featured, very easy to test locally via Docker and deploy and scale in AWS with ECS, RDS, ES, and ELB, good documentation and excellent support via Slack

Interface could be more intuitive and being Java/Tomcat-based makes it a little bloated

Integration with our existing services was fairly painless, given we were replacing another authentication engine.

We have had a positive experience with the product.

Since we build lots of stuff using .Net and FusionAuth has the simplest of ways to get deployed on an Ubuntu Server. Just one line and it will be installed easily.

I wish I could even have Identity Validation for Mobile Number Users and not just Emails.