4 ms·
SSO is more than password management. It is instant provisioning and deprovisioning of users. Role management and auditing. Enforcement of security standard
by adrr 6y ago
SSO is more than password management. It is instant provisioning and deprovisioning of users. Role management and auditing. Enforcement of security standards like 2FA in a central place.
- yladiz 6y agoNot really relevant for the specific topic, but to be more precise, SSO is only the sign on part. Usually the provisioning/de-provisioning is handled by SCIM, which is related but distinct. You have some SaaS products that offer SSO but not SCIM, for example.
- adrr 6y agoCurious what IDP service doesn't provide SCIM and just SSO. Doesn't SAML 2.0 have SCIM support?
- yladiz 6y agoSorry, I should have been more clear. When I typed SaaS products I meant more about a non-IDP product. They might support SSO but not SCIM-based account provisioning, especially if it's in-house auth (not using something like Auth0). I worked on a product that supported SSO but not SCIM for a long time and not all SCIM features were supported.
- samstave 6y agoWho is the best SSO provider? Where can I learn about best SSO practice/implementation?