4 ms·

The official terminology for this is "provisioning" and "deprovisioning" or overall "lifecycle management" and is a pain for lots of companies in lots of differ

The official terminology for this is "provisioning" and "deprovisioning" or overall "lifecycle management" and is a pain for lots of companies in lots of different contexts. For example, when I left [then startup, now publicly traded] in Nov 2013, it took them 15+ months until they turned off my Github access.. in the meantime, I had access to all the private repositories. (Yes, I notified them multiple times.) SAML is pretty widely supported but yes, it's a pain. SCIM[0] is less painful approach for the provisioning side and maps to the API mindset better. Unfortunately, it hasn't seen mass adoption so far but I think we'll get there as more people understand it and/or realize that companies will pay for it. But you'll still need SAML or OIDC for the SSO piece. I do think there's a business need for this which is why I joined Okta in 2016, which does exactly this. I'll refrain from a sales pitch but you can explore it on your own[1]. 0 - https://en.wikipedia.org/wiki/System_for_Cross-domain_Identity_Management https://en.wikipedia.org/wiki/System_for_Cross-domain_Identi... 1 - https://developer.okta.com/signup/ https://developer.okta.com/signup/ edit: clarified SAML vs SCIM

web007 9y ago
Okta is exactly what the OP is looking for. I just looked up their integrations before answering because I couldn't remember for Github, but they support Github and DockerHub, plus AWS, Jira, Slack, G-Suite and more.
willow9886 9y ago
SAML and SCIM achieve two different use cases. SCIM is specifically used for identity management (hence the name: System for Cross-domain Identity Management, or "SCIM"), whereas SAML is used to securely pass user information from an IDP to an application.
mrep 9y ago
Your product and pricing page are super confusing to me. You talk about "users" but don't you mean "employees". The product I am looking for is one where I manage all of my employees access to all of our relevant SAAS applications. Employees log onto this 1 single service and then can log onto all of our tools federated by this 1 service. If an employee leaves, then I simply remove them from this 1 centralized service and they are removed from all of our SAAS services.
- mmaha 9y ago
  [Disclaimer: I work for Okta] Sorry about the confusing product and pricing page.There are typically two different scenarios for pricing: Users can be employees, consultants, contractors etc. or Users can be consumers, customers etc. Depending on the context, the pricing differs. Not only can you remove the user/employee from the centralized service (Okta) but you can also hook-up to various HR systems (if you so desire) like AD, Workday, Ultipro, BambooHR etc. and have them act authoritatively to determine if an employee is employed, on-leave or has terminated their employment. [1] If you work for a Startup, you may want to consider https://www.okta.com/blog/2017/12/okta-for-startups-launches/ https://www.okta.com/blog/2017/12/okta-for-startups-launches...
  - mrep 9y ago
    Wow, that developer site linked by in the comment I responded to is advertising a WAY different (more specific) product than your normal website (from what I understand at least). The regular website is advertising something that makes more sense to me but there are still dozens of pages advertising dozens of different features and different prices. I guess that might work for larger corporations that have already solved internally some of these problems and can pay for bureaucratic solutions but I just want a solution to a known problem. I'm not saying catering to enterprise customers is a bad thing (they have lots of money so you probably should), But there is a reason VC's ask for a vision. What problem does okta solve because I have spent over 10 minutes trying to read through all of your web pages and I still don't know why I should use you guys. I'm not a marketing person, but as a customer, i generally want to know what problem a company solves in 5-10 seconds and know how they solve it within a minute. If you cannot convey that simple information, then I think your product is crap and you are just marketing your product with vague/complex/buzzword terms.
    - Spooky23 9y ago
      If you expect to understand identity in 10 seconds, you don’t even know what you don’t know. You know how we hear about dopey password disclosure breaches every month? Using a service like Okta, Azure AD, etc lets you avoid that type of embarrassment/liability and lets you control the dozens of SaaS and other accounts that your employees use.

web007 9y ago

Okta is exactly what the OP is looking for. I just looked up their integrations before answering because I couldn't remember for Github, but they support Github and DockerHub, plus AWS, Jira, Slack, G-Suite and more.

willow9886 9y ago

SAML and SCIM achieve two different use cases. SCIM is specifically used for identity management (hence the name: System for Cross-domain Identity Management, or "SCIM"), whereas SAML is used to securely pass user information from an IDP to an application.

mrep 9y ago

Your product and pricing page are super confusing to me. You talk about "users" but don't you mean "employees". The product I am looking for is one where I manage all of my employees access to all of our relevant SAAS applications. Employees log onto this 1 single service and then can log onto all of our tools federated by this 1 service. If an employee leaves, then I simply remove them from this 1 centralized service and they are removed from all of our SAAS services.

mmaha 9y ago
[Disclaimer: I work for Okta] Sorry about the confusing product and pricing page.There are typically two different scenarios for pricing: Users can be employees, consultants, contractors etc. or Users can be consumers, customers etc. Depending on the context, the pricing differs. Not only can you remove the user/employee from the centralized service (Okta) but you can also hook-up to various HR systems (if you so desire) like AD, Workday, Ultipro, BambooHR etc. and have them act authoritatively to determine if an employee is employed, on-leave or has terminated their employment. [1] If you work for a Startup, you may want to consider https://www.okta.com/blog/2017/12/okta-for-startups-launches/ https://www.okta.com/blog/2017/12/okta-for-startups-launches...
- mrep 9y ago
  Wow, that developer site linked by in the comment I responded to is advertising a WAY different (more specific) product than your normal website (from what I understand at least). The regular website is advertising something that makes more sense to me but there are still dozens of pages advertising dozens of different features and different prices. I guess that might work for larger corporations that have already solved internally some of these problems and can pay for bureaucratic solutions but I just want a solution to a known problem. I'm not saying catering to enterprise customers is a bad thing (they have lots of money so you probably should), But there is a reason VC's ask for a vision. What problem does okta solve because I have spent over 10 minutes trying to read through all of your web pages and I still don't know why I should use you guys. I'm not a marketing person, but as a customer, i generally want to know what problem a company solves in 5-10 seconds and know how they solve it within a minute. If you cannot convey that simple information, then I think your product is crap and you are just marketing your product with vague/complex/buzzword terms.
  - Spooky23 9y ago
    If you expect to understand identity in 10 seconds, you don’t even know what you don’t know. You know how we hear about dopey password disclosure breaches every month? Using a service like Okta, Azure AD, etc lets you avoid that type of embarrassment/liability and lets you control the dozens of SaaS and other accounts that your employees use.