Hi everyone. I'm relatively new to handling our identity management at work, and it's been added to my data engineering responsibilities. We're currently using Auth0, but I've been asked to look into alternatives for a potential migration.
The big names I keep seeing are Okta and Azure AD, but those are out for us—we're a smaller shop and need something more developer-friendly and potentially less expensive. I get nervous about breaking our existing user login flows, especially for our internal data apps and API access.
Could anyone share experiences with alternatives like FusionAuth, Keycloak, or maybe Supabase Auth? I'm particularly curious about:
* Ease of integrating with a Python backend (FastAPI/Flask) and a React frontend.
* How you handle service account credentials for secure pipeline access (like from Airflow to BigQuery).
* Any migration horror stories or smooth-sailing tips.
I'd be most grateful for any real-world config snippets, especially for the OAuth flows. I've been reading docs, but actual implementation always seems to have hidden pitfalls.