4 ms·
As much as people wish that they can get SSO for free, I don't think it's realistic for many companies. There are a lot of different SSO standards out there, an
by f38zf5vdt 4y ago
As much as people wish that they can get SSO for free, I don't think it's realistic for many companies. There are a lot of different SSO standards out there, and even among the most common type (SAML2) there are many different SP and IDP implementations that you have to interface with to make SSO work properly. Then there are issues around attribute syncing, patching XML vulnerabilities on your implementation (which seem to occur regularly), dealing with customers updating or patching their own implementations, homebake obscurities in implementations for things like NameID and attribute, and myriad other complications.
At minimum I think it's reasonable to charge for SSO onboarding and maintenance on as as-needed basis.
- atonse 4y agoNot really anymore. There are many places that do self service SSO after charging you for it. The best happy medium I’ve found is allowing “sign in with google” for free and true SAML paid.