3 ms·

Anecdotal from my experience in Presales selling Enterprise software. Out of 10 enterprise segment customers: - 8/9 would prefer SAML - 2/3 have a compliant IdP

Anecdotal from my experience in Presales selling Enterprise software. Out of 10 enterprise segment customers: - 8/9 would prefer SAML - 2/3 have a compliant IdP which supports OIDC (ADFS needs to be v4.0 therefore run on Windows Server 2016+) You'd be a fool to only focus on OIDC, at least for the next few years. As Azure gobbles up the Enterprise segment, Azure AD can be used to provide OIDC which will be nice. Though most admins who we work with are far more comfortable with SAML. To be completely honest, the major of customers who are primarily interested in OIDC are coming from Google and/or GCP shops (which are few and far between).

wil421 7y ago
In my experience with enterprise SASS products they mostly use SAML and most companies I work for use it. At the time I was trying to switch to OAuth or OpenID but the support was severely lacking for off the shelf enterprise software, especially older stuff. ForgeRock was also giving the identity management team issues so SAML was the only option.