4 ms·
It's not just that. The most important part of Okta is the directory integration, not the SSO part. For small companies that have never acquired anyone, it does
by jiveturkey 5y ago
It's not just that. The most important part of Okta is the directory integration, not the SSO part. For small companies that have never acquired anyone, it doesn't matter.
It also makes user lifecycle someone else's problem. Very important. As a medium and larger sized company, when you have to tell your customers your homegrown IAM was pwned, you're in for a world of hurt. When you're just in the boat with everyone else who got popped, it's an easily recoverable incident.
- ownagefool 5y agoIf you have any sort of footprint, it's pretty much expected you'd have protective monitoring so you can articulate what these pwned accounts have actually achieved on your infrastructure. It doesn't really matter who runs your auth service, if the auth service getting pwned results in a reportable attack, you're in for a world of hurt. The next step is to articulate why this isn't your fault and that you did everything you reasonbly could have done to not get pwned. Do you have evidence to support you did your due dilligance on your provider?