2 ms·

Ultimately you end up implementing whatever your customers want implemented.

• haswell 2y ago
  As someone who has implemented SAML and OIDC at many large companies, I disagree with the general thrust of this comment. Customers usually care most about a specific outcome. If that outcome can be achieved using OIDC instead of SAML, some orgs will go with the recommendation instead of the initial request. I bring this up because most customers asking for SAML were doing so either because that’s what they were told they needed, or because it’s what they did last time. When presented with additional options and more importantly the rationale behind those options, many customers either switched gears or started working towards OIDC and changed SAML to an intermediate step along the way. Push for the best solution. Sometimes it doesn’t change anything, but it often does, and even when it doesn’t, it raises awareness of the alternatives. (There will always be some subset of orgs with immovable standards that are immune to good rationale, but these need not prevent progress elsewhere).