Teams should choose based on whether the app needs only login or also enterprise identity controls such as SSO, SCIM, audit logs, and tenant management. In Remix, the provider must also support server-side session flows cleanly. If those requirements are likely to arrive soon, choose for the target operating model, not the first release.
Related resources from NHI Mgmt Group
- How should teams choose authentication for a FastAPI app that may need enterprise customers later?
- How should teams choose authentication for a Laravel app that may need enterprise customers later?
- How should teams choose an authentication approach for Java apps with enterprise requirements?
- How should security teams choose authentication for a .NET application that may need enterprise customers later?
