Hey everyone, hoping to get some real-world perspectives here. I've been deep in the weeds of customer identity for a few projects now, having migrated user pools from old homegrown systems to Auth0 and then later to Azure AD B2C. The pain of moving authentication states and managing progressive profiling is still fresh 😅
My current enterprise is evaluating Transmit Security for a massive CIAM overhaul. The sales demo was, frankly, dazzling—especially their "passwordless everywhere" orchestration and the fraud detection bundles. But when the quote landed... let's just say it required a serious sit-down. We're talking an order of magnitude above some other platforms we've run the numbers on.
So my big question is: **for those who've actually implemented it, does the premium price translate to tangible developer velocity or operational savings that justify the cost?**
I'm particularly curious about:
* **The developer experience:** Is the APIs and SDKs as cohesive as they claim? For example, how clean is a standard integration flow? In my PoC, a basic login with risk detection looked okay:
```javascript
// Their SDK call for a biometric login seemed straightforward
const client = new TransmitSecurityClient(tenantId);
const authResponse = await client.authenticate.biometric({
action: 'login',
userId: userHandle
});
```
But I worry about complexity surfacing in edge cases, like when we need to pipe attributes to our legacy PostgreSQL customer tables.
* **Customization vs. Time-to-Market:** They sell heavily on no-code workflows. Can you *truly* model complex journeys (think: step-up auth for high-value transactions, integrating with our Snowflake data-lake for analytics) without it becoming a black box that requires support tickets to tweak?
* **Migration reality:** We have a fragmented user base across three systems (MongoDB-backed app, a MySQL legacy member area, and social identities). Their migration tools *looked* good, but how painful is the actual data mapping and transition? Any major pitfalls with preserving existing password hashes or merging duplicate profiles?
* **Total Cost of Ownership:** Beyond the licensing fee, did you find you needed fewer FTE to manage it? Or did you end up needing expensive professional services for every minor change?
The alternative path we're weighing is building a more modular setup with a combo of Keycloak for core auth, a dedicated fraud service, and maybe Hydra for OAuth2. But that brings its own integration and maintenance headaches.
Would love to hear your war stories, especially if you came from another CIAM platform. Did Transmit Security become a "set it and forget it" piece of critical infrastructure, or did the gloss wear off post-implementation?
Thanks in advance for any insights you can share!
—B
Backup first.