About the author
Ante Radoš
Principal Software Engineer
Customers who interact with your products often first encounter your identity and access management (IAM) system. Choosing the right IAM solution is vital because all other customer interactions depend on that first crucial touchpoint, so it has to be stable, secure, and user-friendly.
The Importance of IAM
IAM is a framework of policies and technologies that ensures the right users have appropriate access to resources within an enterprise. It helps protect sensitive information and improves user experience by streamlining access through features like single sign-on (SSO), identity brokering, and social login.
IAM systems also support standard protocols such as OpenID Connect, OAuth 2.0, and SAML, making integration with other systems seamless.
Open Source vs. Commercial IAM Solutions
When choosing the right IAM system, you first have to decide between open-source and commercial solutions. Although both options have their own advantages and drawbacks, they depend largely on your specific needs and future needs.
- Open Source Solutions: Many companies start with open-source IAM solutions because they are cost-effective and flexible. They allow you to customize features to your specific requirements without the need for significant investment. However, open-source solutions rely on substantial internal resources, like developers who need to maintain and expand the system, which can lead to unexpected costs.
- Commercial Solutions: On the other hand, commercial IAM solutions bring you ready-to-use features and dedicated support. In the long run, that means reduced maintenance efforts. But, the licensing fees mean larger initial cost. However, the reliability and ease of integration balance out the initial costs as your business needs evolves.
Keycloak
Keycloak is a key player in open-source IAM solutions. It provides features like SSO, identity brokering, and social login integration.
One of Keycloak’s features we like the most is its flexibility. Custom code allows you to extend its functionality as your business needs grow, making it one of the most popular choices for companies who want to customize their IAM systems.
Okta CIC
We often work with Okta CIC, a key player in commercial IAM solutions. It offers a flexible, drop-in authentication and authorization service. It’s user friendly and reliable and designed for customer-centric applications.
Okta effortlessly integrates with various applications, and its extensive developer support makes it a great option if your priority is ease of use and scalability.
Transitioning from Keycloak to Okta CIC
It’s interesting to witness how our clients grow and, as such, so do their requirements. With one client, we had an opportunity to work with Keycloak at the start of our partnership, but as their needs grew, we also helped with their transition to Okta CIC.
Initial Setup
When we started working with this client, we analyzed all their needs and shortlisted three options. Both Keycloak and Okta CIC were in the running, but ultimately, they chose Keycloak because it met their initial needs and was cost-friendly.
At that point, Keycloak provided them with a free, easy-to-use platform that aligned well with their needs. We supported the client in implementing Keycloak and customizing it to integrate with their existing systems.
Challenges of Scaling
But, as the client expanded, their needs evolved, which meant more features and integrations. Keycloak’s flexibility allowed for customization, but that also meant the client’s developers were spending more time maintaining and extending the system.
Their main challenges were:
- Resource Allocation: Developers spent more time covering IAM issues than on their core product development.
- Infrastructure Demands: The growing complexity of Keycloak integrations increased infrastructure requirements, so more time and resources were spent on managing those effectively.
- Maintenance Overhead: With an increasing number of custom modules, maintaining and updating the IAM system has also become more demanding.
The Shift
Faced with these challenges, we reevaluated Keycloak and performed a proof of concept (PoC) with Okta CIC. The client decided on a transition, which went smoothly and required only minimal customization to meet their new needs.
Benefits Realized with Okta CIC
- Ease of Use: The client found Okta CIC more intuitive, allowing their development teams to refocus on delivering product features rather than maintaining IAM extensions.
- Cloud-Based Infrastructure: Okta CIC’s cloud-based model relieved the infrastructure burden and provided a solution that adapts to the client’s growth without requiring extensive maintenance.
- Scalability and Flexibility: Okta CIC is easily scaled to meet new needs, supporting future expansions without extensive customizations. This allowed for faster deployment of new features and reduced time-to-market for new initiatives.
How to Choose the IAM Solution?
Choosing the right IAM solution is a critical decision since it impacts user experience, as well as your operational efficiency.
Our journey with the client highlighted the importance of considering both current needs and future scalability. While Keycloak offers powerful capabilities for many, Okta CIC provides a solution that scales with your needs.
By understanding each option’s strengths and limitations, you can make an informed decision that aligns with your strategic goals but also enhances your security, efficiency, and user satisfaction.
Whether you choose an open-source or commercial solution, evaluate your current needs, anticipate what the future brings, and select a partner who aligns with your vision.
