DEV Community

Discussion on: I need to build an SSO solution for my company, which programming language should I use?

 
nickytonline profile image
Nick Taylor • Edited

Roberto, a word of advice. Don't build one. I went through this at a job already. I received a code base from a contractor that was supposedly ready to go to prod (spoiler, it wasn't) for a custom SSO solution (SAML, WSFed...). Eventually, it went to prod, but there was always little tweaks and maintenance. In the end, we convinced our client to buy a commercial solution, which included support and they were great when I had to work on some custom stuff to integrate into it.

Unless your specialty is Identity Access Management, go with an off the shelf solution. If you need OAuth, go with Auth0. I mean, they actually wrote the book on JWT 😉

Thread Thread
 
nickytonline profile image
Nick Taylor

Having said that, it's still good to understand these technologies. As well, to my initial point, the off the shelf solution will have already solved all the edge cases that you'd probably run into. And new ones that crop up will be treated by their support team while you focus on what's important, building your product.

Thread Thread
 
robertogongora profile image
Roberto Gongora

Thanks a lot for the advice, Nick! I'm actually really scared of not knowing enough about this because I don't want to debug things in a live environment with angry people up my neck 😅. And I'm definitely not an IAM specialist XD.

As you said, I'll still try to learn about the underlying technology, but I'll try to pitch the idea of getting an off-the-shelf service instead of building one, and see how that goes.

If I get told to build one still, then well, I'll have to put on my Indiana Jones hat I guess 🤪