The amount of rent seeking by SSOaaS providers goes unremarked and unnoticed. Pardon the annoying analogy but it's like Java programmers clutching at control w

The amount of rent seeking by SSOaaS providers goes unremarked and unnoticed. Pardon the annoying analogy but it's like Java programmers clutching at control which is undermined by not only the language but the JVM itself. "Java is secure by design.": I get the full stop. You don't want me to say this. But it's not secure in practice. SaaS vendors all have a vetted list of SSO providers (even if there's only one option in the list). Honestly I'd love to know how SSO vendors market themselves to app vendors. I've never worked with this in a corporate environment. What I do know is that as a SaaS user, I'd like to be able to provide my own authentication or second factor and that's never in the signup.