3 ms·
The other day I used an authenticator app for my second factor. It was successful as far as that goes but it still wanted to verify that it's me by sending a pr
by dizhn 4y ago
The other day I used an authenticator app for my second factor. It was successful as far as that goes but it still wanted to verify that it's me by sending a prompt to my phone. I don't call this security. This is abuse.
- tapoxi 4y agoYou're misunderstanding the above post and conflating it with a MFA authentication method. If you use another authentication provider, Google does not authenticate you at all - your provider does (Okta etc).
- dizhn 4y agoYou're right it's a weak answer to that but I was aware of what's being said. The example was for the arbitrariness of the whole thing. The same Google could easily decide to drop a provider or force their own again etc.
- _23sd 4y agoDropping SSO support would mean losing a lot of enterprise customers. Forcing organizations that have chosen Okta or Azure AD as their identity solution to either get separate Google accounts or sync their directory to Google, would not be easy at all.