4 ms·
I work at a place that has banned the use of SSO because it allows an attacker to compromise one set of credentials and have access to everything. Good times
by ru552 7y ago
I work at a place that has banned the use of SSO because it allows an attacker to compromise one set of credentials and have access to everything. Good times
- anon73044 7y agoMy employer actively promotes SSO to clients for the main product, but discourages it's use for internal applications.
- oxguy3 7y agoThat's what 2FA is for! And even with SSO, your credentials don't have access to everything, because no one employee should have access to everything. People should only have access to the IM channels, git repos, etc that they are actually involved with. Admin accounts and especially critical systems should be set up to require separate/additional authentication.