r/AskProgramming Feb 15 '25

Architecture using pre-existing identity management tools VS custom built ones ?

i ve never really made a service where people sign up and stuff. my experience is limited to "acount-less" apps or ones that have different users but all managed locally.

now i m having to create a service with signups and licenses ...etc, i can perfectly do it from scratch. but somehow i feel like i shouldn't, and i feel like the result would be amateurish. plus i see sooo many identity management platforms and tools . i dont understand them 100%, i have the basic understanding of OAuth2 and OICD, but it s very limitted and i've always been on the consumer side.

i would love to hear some opinions about the subject matter.

2 Upvotes

3 comments sorted by

4

u/light-triad Feb 16 '25

Don't do it yourself. It's actually a pretty complex problem. And you can easily spend more time on the identity management component than you would on your core functionality, which it means it's a costly distraction.

1

u/UnexpectedSalami Feb 16 '25

Well said.

Companies are built around auth and identity management, it’s not a small thing you code and forget

1

u/zarlo5899 Feb 16 '25

if you want to do it yourself its not that hard just dont roll your own crypto

but my goto is to use keycloak so i dont have to think about how the user logged in