5 ms·
We’ve been monitoring this internally, as customers of an Okta-like service. I’ve also been closely monitoring the responses from our CTO and VP of Security wh
by dvtrn 5y ago
We’ve been monitoring this internally, as customers of an Okta-like service.
I’ve also been closely monitoring the responses from our CTO and VP of Security when someone from our DevOps team posted a link to the Verge article in slack this morning.
Which brings me to this inquiry: How are your orgs responding to this? We have a dependency on an Okta-like provider and my first thought when reading this news was “you know, wonder if we should give our shit a sanity check”, and someone beat me to this, proposed it in slack but the idea was turned down by our SecOps team.
- hughrr 5y agoSounds about right. Here there will be a staff security training symposium that runs everyone through a training course bought in from the lowest bidder that is tangentially related to the issue followed by a self-congratulatory management meeting and that will be the whole issue resolved to satisfaction.
- lurker91283 5y agoI moved over to Azure AD this morning (we only have a few devs and were already using Azure DevOps so this was doable). I requested that Okta cancel our account and let them know the reason was the potential data breach and their CEO's response on Twitter. Okta's response was that we signed an MSA agreement and that cancelling isn't an option, nor termination of fees.
- hughrr 5y agoThey sound like they're running the organisation like a dating site. More reasons to look elsewhere.
- droopyEyelids 5y agoOkta is the Oracle of identity management. https://auth0.com https://auth0.com is the "still cares about customers" vendor I'm not affiliated with them, just traumatized by working in IT
- haneefmubarak 5y agoAuth0 was acquired by Okta (https://auth0.com/blog/okta-acquisition-announcement/ https://auth0.com/blog/okta-acquisition-announcement/), although Okta claims in the post that > There is no impact to Auth0 customers, and there is no impact to HIPAA and FedRAMP customers.
- Hawxy 5y agoAuth0 is run as an isolated subsidiary in its own infrastructure, with the old CEO still overseeing operations. Due to the massive difference in Okta & Auth0's implementations I don't see that changing anytime soon.
- djbusby 5y agoThat's what ASCAP does too! Scummy!
- neurostimulant 5y ago> Okta's response was that we signed an MSA agreement and that cancelling isn't an option, nor termination of fees. Interesting. Does this agreement also works the other way as well (Okta can't just decides to terminate your account no matter the reason)?