Auth0 and Passport: A Tale of Two Solutions

Bryan Giese

Auth0 and Passport - A Tale of Two Solutions

We’ve seen a lot of news lately about Auth0 and we are happy to see it. Auth0 and Passport are competitors in the customer identity and access management (CIAM) space and it is exciting to see a company that we respect be recognized by the wider community. Strangely, if I say this at the CIAM events we attend I get a few curious looks. Why would we want them to get attention? Doesn’t Passport want clients?

Why It’s Good for Auth0 and Passport

Of course Passport wants clients! We want to earn all the clients we can, but our goal is not to simply get all the clients. Our goal is to provide the right solution that clients need. This is exactly why we are happy about Auth0. The fact is, Auth0 and Passport are similar in a lot of ways. We both have the basic features that most old and new customer identity solutions offer:

  • Authentication for web and mobile applications
  • Unlimited users and groups
  • OAuth Token & API Key Management

We also share some more advanced features that make a difference in the usability and security of an identity platform rather than quick-connect-like-social-media solutions. Any large or soon-to-be-large applications actually have to manage their users, not just authenticate them via Facebook. Auth0 and Passport provide:

  • Multi-Factor Authentication
  • On-Premise and Private Cloud Deployments
  • User Search and User Management Interfaces

And then we both go farther to provide the extras that make a difference for the people who actually use our services, the customer:

  • Brute-Force Hack Detection
  • Password Strength Settings
  • Skinnable Login and Single Sign-On to match your company’s branding

You can see, Auth0 and Passport share a lot of very powerful, secure and downright useful features, and the community is recognizing the essential elements of a true customer identity management platform. Since we have been approaching the CIAM challenge in similar ways, good news for them is good news for us.

We do have differences though.

How Auth0 and Passport Are Different

Single-Tenant Security

We mentioned above that Auth0 and Passport both have on-premise and cloud options. Our difference is both our local and cloud options deliver true data isolation as single-tenant solutions. This eliminates the possibility of data leakage between unrelated companies, whether accidentally or through sabotage. For additional security, customers can implement a firewall at any layer, further protecting their data from unauthorized access. With the substantial increase in the number and sophistication of hacking, phishing and spoofing attacks, we felt it was the best choice. Additionally, Passport’s single-tenant architecture also allows for easier compliance with complex regulatory restrictions in many industries and countries. Germany’s Bundesdatenschutzgesetz, Australia’s Privacy Principles, Canada’s PIPEDA, and most recently the European Union’s GDPR all place different restrictions on how a user’s personal data can be used and transmitted. Passport provides the expanded control that companies require to comply with laws and regulations in their specific region. For more details on the benefits and pitfalls of single- and multi-tenant solutions read our recent whitepaper.

Localization

Every company conducting business through the internet today has a storefront open to customers from around the globe. While having a vast pool of potential customers is a benefit, many companies struggle to deliver their products and services to the wide range of languages they encounter. Passport was designed to allow you to easily communicate with your customers in the language they prefer. You can create customized HTML and text email templates for the languages you support, and easily add additional options as your community grows. Find out more in the Passport Email Templates video tutorial here.

Configurable Password Encryption

Every application has different security requirements. Some need to be HIPAA compliant, while others can be less stringent. We let you pick the level of security you need, and adjust it as quickly as your needs or threats evolve. We also allow you to use different password schemas for different groups of users, making it possible to consolidate multiple identity management systems into one efficient platform. This can be a completely transparent process without any downtime or customer friction. For more details, read about how we migrated DataStax to Passport from their previous solution.

Reporting and Analytics

User reports have been in every slide presentation and corporate board meeting since the first bit of software hit the internet. From day one we give you the most viewed reports like daily and monthly active users, logins and registrations without any additional configuration or setup.

Custom Feature Development

Another difference between Auth0 and Passport is our size and flexibility. Auth0 is a huge corporation with hundreds of employees and tens-of-millions in investor funding. They are beholden to an extensive range of investors and board influencers who are all chasing “the best product-market fit” to maximize shareholder value. Smaller companies with unique or specific needs are often overlooked or ignored.

Inversoft is a small, bootstrapped company dedicated to our customers. For the last 10-years we have successfully provided our core solutions with unique customizations and one-on-one support for our clients. We have eliminated the overhead, complex approval pipelines, and corporate red-tape that cripples large firms so we can deliver exceptional solutions for clients like DataStax, Mineplex, and Niantic (Pokemon).

To see more details on how Auth0 and Passport stack up, download this feature comparison and please contact us if you have any questions.

Learn More About Passport

Passport is designed to be the most flexible and secure Customer Identity and Access Management solution available on the market. More than a login tool, we provide registration, data search, user segmentation and advanced user management across applications. Find out more about Passport and sign up for a free trial today.

Try Passport