> it's also worth knowing that SSO is basically a universal best-practice for security teams It is also best practice that some things explicitly don't sit beh

> it's also worth knowing that SSO is basically a universal best-practice for security teams It is also best practice that some things explicitly don't sit behind SSO for defense in depth. If for example you leave CrowdStrike and JAMF behind Okta, and Okta gets popped an attacker can disable your endpoint protection and push ransomware to every machine.