3 ms·
You always have the option to turn on a third-party Identity and authentication provider and not depend on google auth at all. https://cloud.google.com/archite
by vinay_ys 4y ago
You always have the option to turn on a third-party Identity and authentication provider and not depend on google auth at all.
https://cloud.google.com/architecture/identity/single-sign-on https://cloud.google.com/architecture/identity/single-sign-o...
- dizhn 4y agoThe other day I used an authenticator app for my second factor. It was successful as far as that goes but it still wanted to verify that it's me by sending a prompt to my phone. I don't call this security. This is abuse.
- tapoxi 4y agoYou're misunderstanding the above post and conflating it with a MFA authentication method. If you use another authentication provider, Google does not authenticate you at all - your provider does (Okta etc).
- dizhn 4y agoYou're right it's a weak answer to that but I was aware of what's being said. The example was for the arbitrariness of the whole thing. The same Google could easily decide to drop a provider or force their own again etc.
- _23sd 4y agoDropping SSO support would mean losing a lot of enterprise customers. Forcing organizations that have chosen Okta or Azure AD as their identity solution to either get separate Google accounts or sync their directory to Google, would not be easy at all.
- scarmig 4y agoDoes this work with any SAML IdP? E.g. a private Keycloak instance?