These capabilities are increasingly required just to get in the door, depending on your target customer. The alternative is that your product becomes a securit

These capabilities are increasingly required just to get in the door, depending on your target customer. The alternative is that your product becomes a security exception, which infosec teams are more and more unwilling to grant, for pretty good reasons. The good news for product teams is that there are more and more off-the-shelf options that can be quickly integrated vs. having to start from scratch. But the main point of this comment is: I think you’re right that “near term roadmap” was good enough a few years ago, but less so now, and continuing to trend towards “not acceptable” if selling to enterprise customers. (Observations as a recent/former auth PM at a SaaS/PaaS that sold primarily to enterprise customers).