4 ms·
Again? What’s going on with these people? Is there any other SAML provider that gets compromised as often. They’re like the LastPass of SAML providers…
by mc32 3y ago
Again?
What’s going on with these people? Is there any other SAML provider that gets compromised as often. They’re like the LastPass of SAML providers…
- omneity 3y agoHow are they not losing all their customers confidence and seeing them leave is a real mystery to me. Same for LastPass. Both are bad at the very thing they’re supposed to provide and be good at.
- toomuchtodo 3y agoIdentity and auth provider consumers are a mix of lazy, under resourced, and unsophisticated. Lots of inertia and checkbox completion vs due diligence. It's also a pain to move, having had to help an enterprise move from Lastpass to 1password. Even worse trying to swap out idps. Operating your own idp internally requires sophistication and resources (engineering talent, org will, etc). I am sympathetic to the idea of not reinforcing bad behavior at a vendor, but also mindful that sometimes you're going to risk accept and move on (and revisit when the contract is up for renewal). Time and resources are finite. EDIT: With all the above said, Okta would not be my first idp choice, considering all available information. (head of security @ fintech, I own customer and internal IAM, thoughts and opinions my own)
- jim180 3y agohonest question, what would be an alternative to Okta?
- deleted 3y ago[deleted]
- djbusby 3y agoOry? https://github.com/ory https://github.com/ory
- jiggawatts 3y agoMicrosoft Entra Id does pretty much the same thing.
- mc32 3y agoGoogle, Azure (they had a problem recently), OneLogin, a few smaller players as well.
- calrueb 3y agoIt depends if you are talking about Okta's "Workforce Identity cloud" which is their flagship product under the Okta name and serves businesses needing an IDP to manage their employees. Or if you are looking for "Customer Identity cloud" aka Auth0 alternatives which is primarily for authenticating a businesses end-users/customers.
- jim180 3y agoyeah, forgot to mention. I'm looking into "workforce identity cloud", and apparently Microsoft's offer is very hard to pass, if an organisation uses/requires to use MS Office.
- calrueb 3y agoMicrosoft Entra ID formally known as Azure Active Directory is popular option. But the list goes on Ping Identity, One Login, Google Workspaces, and more are all options out there.
- deleted 3y ago[deleted]
- e_y_ 3y agoI had to double check the date to make sure it wasn't an old article. Also, this is inexcusable for an $11B company.
- onetimeuse92304 3y agoThey aren't just $11B company, They are $11B company with security as their core product.
- Muromec 3y agoIn corporate speak, security means compliance and liability outsourcing, so it works just fine.
- deleted 3y ago[deleted]