[ADR] Auth0 Migration

[JakubC-projects]

Context

• Our current Auth0 solution is costing us a lot of money to operate (kr. 500.000 per year)

Alternative Providers

1. Ory
   • [x] Supports all flows
   • [x] Authorization code
   • [x] PKCE
   • [x] Client Credentials
   • [x] Device code
   • [x] Permission management
   • [x] Scales well - hosted solution supports 5000 logins/sec
   • [x] Extension logic
   • [?] MFA
   • [x] TOTP
   • [ ] SMS
   • [x] Social login
   • [x] Custom branding
   • [x] Consents
   • [x] Costs less

Decision

• the choice and the arguments

  Consequences

• known issues which can occur because of chosen decision

  Alternatives

• were there any other alternatives? why were they not choose