3 ms·

Local backup strategies are often terrible and untested, if they even exist. While no service is infallible, 1Password and others seem a lot less likely to be l

Local backup strategies are often terrible and untested, if they even exist. While no service is infallible, 1Password and others seem a lot less likely to be lost/stolen/destroyed than a personal laptop. I'm not sure why you're rolling Okta in here, but Okta can a completely different thing depending on what you're referring to. Single sign-on (with something like Okta) makes it so that a user doesn't need to manage a dozen passwords and enables an organization to limit access of a user's account if needed. If you use an app with Okta SWA, you (as the admin) can create a password for users so your users don't have the responsibility of making a strong password. But this is only for stuff that can't use OIDC/SAML. Ideally you'd use Okta with OIDC/SAML with your applications so your individual users won't have static credentials, and in this case, there isn't really a parallel here to some software you'd run locally.

paulddraper 3y ago
LastPass also does SSO (and probably other "password managers" as well).
- TheNewsIsHere 3y ago
  I think at this point all the major ones do. 1Password Business, LastPass Enterprise, and BitWarden Enterprise all do. I think the commenter was advising on the use of SSO in lieu of passwords where possible (at least in a corrosive context, but personally I use SSO via Azure AD wherever I can at home too.)
  - redserk 3y ago
    This applies more to Okta because once you log in, you get a screen showing all the applications you have access to. As an end-user, if you click on any tile, you get your application regardless if the authentication scheme is SAML/OIDC/static credentials. In the case where static credentials are required for a service, the end-user doesn't have to get a sheet of paper telling them the username to use. Instead, a script provisions a username/password behind the scenes and Okta is responsible for keeping the username/password safe. Admittedly, I don't know if the traditional password manager companies offer a system like this, where you get a matrix of apps to choose from and the user is removed from knowing a username/password is being exchanged.
    - paulddraper 3y ago
      How is the username/password entered into the site? Using the user's browser right?

paulddraper 3y ago

LastPass also does SSO (and probably other "password managers" as well).

TheNewsIsHere 3y ago
I think at this point all the major ones do. 1Password Business, LastPass Enterprise, and BitWarden Enterprise all do. I think the commenter was advising on the use of SSO in lieu of passwords where possible (at least in a corrosive context, but personally I use SSO via Azure AD wherever I can at home too.)
- redserk 3y ago
  This applies more to Okta because once you log in, you get a screen showing all the applications you have access to. As an end-user, if you click on any tile, you get your application regardless if the authentication scheme is SAML/OIDC/static credentials. In the case where static credentials are required for a service, the end-user doesn't have to get a sheet of paper telling them the username to use. Instead, a script provisions a username/password behind the scenes and Okta is responsible for keeping the username/password safe. Admittedly, I don't know if the traditional password manager companies offer a system like this, where you get a matrix of apps to choose from and the user is removed from knowing a username/password is being exchanged.
  - paulddraper 3y ago
    How is the username/password entered into the site? Using the user's browser right?