Ory Reviews & Product Details

The entire platform is designed according to cloud-native principles. Performance is outstanding, and we can be confident that Ory will scale seamlessly as our user base grows. Consistent compliance with standards such as OAuth 2.0 and OpenID Connect Certified™ also gives us investment security. That's why I chose this platform for my start-up. Review collected by and hosted on G2.com.

Overall, our experience with Ory Network has been extremely positive. If we had to name one area for future improvement, it would be the management of identity schemes.

Currently, identity schemas are immutable once created and cannot be deleted. We understand that this approach ensures data consistency across different versions. However, in everyday development, especially in the initial setup and testing phase, this means that accidentally created or outdated schemas cannot be removed from the list.

This is not a functional problem that affects security or performance, but rather a minor operational inconvenience. A "soft delete" or archiving function for schemas that are no longer in use would be a welcome addition here to improve the clarity of the configuration. Review collected by and hosted on G2.com.

We have successfully migrated most of our applications' authentication from another SaaS provider to Ory Network (with the migration still ongoing). We are using Ory Hydra and Ory Kratos for our machine-to-machine services and web frontend applications. One of the biggest selling points for us was the ability to use a slightly modified Ory Network production configuration to run our own Ory stack on Docker. This feature enables our developers to run the entire stack locally and facilitates CI/CD pipelines for testing configurations. Additionally, their Slack community is quite active, with Ory employees providing assistance on multiple occasions. Impressively, our proof of concept for migrating to Ory Hydra/Kratos was completed in less than a day. Review collected by and hosted on G2.com.

We provision the entire platform through a CI/CD pipeline, but the Ory Workspace/Project API key system currently lacks proper access control. This is surprising, given that Ory is an auth platform that provides solutions like Ory Keto. Our pipeline relies on a collection of fairly large Bash scripts to address some idempotency issues with their CLI. The difference between the Ory CLI and the Kratos/Hydra CLI also caused some issues when developing locally. We are aware that Ory is working on a Terraform provider, and we are hopeful that it will resolve these challenges. Additionally, we have encountered instances where the documentation was either missing or too vague, requiring us to seek clarification from their Slack channel. Review collected by and hosted on G2.com.

I love having an open source oidc library at my disposal with the comfort of being able to fallback on a hosted/commercial option. I've used Ory for a production deployment and the backbone of a identity broker system, and having the extensible core of Ory Hydra has made this easy and allowed me to put the "hard parts" of OAuth and Oidc to the experts while building out for my custom use case. I have really only touched on Hydra, so cannot speak to the other parts of the ecosystem, but hydra is well designed and documented and a great choice for self-hosters. Review collected by and hosted on G2.com.

I've found the token cleanup process, particularly for postgres backends a bit lacking. For long running deployments, I found the janitor functionality actually made performance worse. Some more support for self hosters would be great, but understood that you are a bit on your own in that circumstance. It was some trial and error and production pain here, which I am sure the managed versions eliminate. Review collected by and hosted on G2.com.

I have no hesitation in recommending Ory to my customers. I have used a variety of different identity providers (including Firebase, AzureAD, Auth0 and Keycloak) over the years for different projects, and whilst they can be used to get the job done, I've run into various limitations and annoyances with all of them. Firebase in particular has been rather painful, and so when I started my most recent project I was keen to give the Ory suite a go for my customer. It already had a good reputation in the open-source community, and the team have contributed back to the Go ecosystem in the form of their fosite library.

Since adopting Ory (and specifically, Kratos for identity and Hydra for OIDC), I've been very happy with the results. Much of the difficult plumbing of login and self-service account management flows is abstracted away from you - which means fewer security pitfalls to worry about trying to avoid, because security best practice has been baked in to the design. Despite that, I've been able to customise the user interface with ease and implement my customer's branding and design requirements. Review collected by and hosted on G2.com.

Like any product, I've run into areas of documentation that could have been slightly clearer. There is an Ory Slack workspace for asking questions, and I've felt like any feedback on documentation I've provided has been heard.

Sometimes pull requests can take a while to be reviewed, but this is only likely to affect prospective customers who want to contribute back fixes to the project. Balancing running a company with managing a number of open-source projects, and reviewing contributions is always tricky. Review collected by and hosted on G2.com.

The Ory team has been a supportive and thoughtful partner for us, including one-on-one technical support and adding requested features/changes. We chose Ory and Ory Network because they could support the amount of customization and advanced features we required. Having experienced some alternatives, we have no regrets choosing Ory! Review collected by and hosted on G2.com.

I would not suggest Ory for basic use cases because there are simpler options out there to get started Review collected by and hosted on G2.com.

The developer experience is just incredible. Ory makes auth a really easy thing to use and makes powerful features approachable. Review collected by and hosted on G2.com.

As a hobbyist, I sometimes wish there was an easier way to use their Kratos tooling, I don't want to have to setup Oathkeeper alongside it for one of my projects just because of where I have to deploy it. Not amazing in Coolify. Review collected by and hosted on G2.com.

Ory is very easy to integrate into application thanks to the provided SDK and component library. It only took us 2 days to have it fully integrated in both our front (with customized login forms) and our API.

Since Ory is an open-source solution, it also gave us the reassurance that we could switch to a self-hosted setup if necessary. This flexibility helps us avoid vendor lock-in and protects us from the significant price increases that some competitors might impose. The Ory Network pricing is also cheap (70$) while providing a large set of features related to authentication, making it a great deal.

On the documentation front, the team has made significant improvements over the past year. It is now easier than ever to understand the challenges of authentication and how to address them. Authentication is often a complex and risk-prone area, but Ory's excellent documentation and straightforward integration gave us the confidence we needed. Review collected by and hosted on G2.com.

Ory Network does not yet cover every settings (editing an identity, updating some internal URL / settings, ...) but the CLI is there as a fallback. Review collected by and hosted on G2.com.

The open source ecosystem of tools impressed me. Their docs are very useful and provided examples are practical and lets you get into the flow of creating your own solutions quickly.

Their products have a clear separation of concerns and once you grasp it you "magically" understand how things connect to each other and how modular their tools can be to fit in our use case. Review collected by and hosted on G2.com.

I have used mostly Kratos and Hydra, and although they work nicely together, it took me a couple of hours to figure out who is doing what, and how they communicate with each other.

So, it would be great to have newcomers to the ecosystem an easy (perhaps even visual) way to understand the ecosystem of tools and how they interact with each other. Review collected by and hosted on G2.com.

The architecture of Ory, where there is no dependencies between their services honestly makes it the most flexible identity system I evaluated. I use both Kratos and Keto I save a lot of time because the configuration is simple, but I can still handle pretty complex use cases.They are easy to deploy and scale in a Kubernetes environment. Review collected by and hosted on G2.com.

Honestly, not many. I do feel that the documentation is not for beginners. Identity is incredibly important for SaaS and even in the age of AI, proper authentication, and authorization will always need to be maintained. I think if Ory were to have exemplary docs on how to use Ory Identity in product lead growth flows, or how to support multi team organization applications. Instead they have small whimsical examples that are fun but not real. Most developers learn by example. Younger developers learn by _literal_ example. Review collected by and hosted on G2.com.

Ory develops opinionated IAM software, that will allow the right amount of customization to adapt it to your use case, but will not allow you to by-pass security. It does not compromise on security. We started using Ory when Ory Network, the cloud solution, did not exist yet, and the open source self-hosting part was the main way. We use it since then, and the Ory stack has proven to be a solid part of our infrastructure. Review collected by and hosted on G2.com.

With the need for monetization, the open source software of Ory is not getting the attention it deserves. Instead, the cloud solution and enterprise images are the way to go, leaving open source users on their own.

I'm sure there are other ways to provide monetized value from the OSS. Review collected by and hosted on G2.com.