3 ms·
if you need SSO you have money if you need SSO but you don’t have money, you have issues
by baq 1y ago
if you need SSO you have money
if you need SSO but you don’t have money, you have issues
- mungoman2 1y agoYes, agreed. What we see is simply a clever way to differentiate the customers that can pay a premium from those that can't. The end goal is to extract the maximum amount of money.
- baq 1y agoI would call it obvious instead of clever, but otherwise fully agreed.
- tptacek 1y agoOr, equivalently, to enable the largest number of customers to use the product, by decreasing prices for smaller customers and increasing them for large ones.
- esseph 1y agoAnd leaves the rest as a security risk
- deleted 1y ago[deleted]
- mmerickel 1y agoThis is just flat-out untrue, OIDC or SAML plus SCIM should be the default for any enterprise-focused service provider or "you're doing it wrong". You can offer your own IDP as the default, but all of the problems that need to be solved to allow your customers to configure their own IDP are important to the design/architecture of your service and the only reason these providers are treating it as special is because they didn't build the integration between their service and their IDP correctly the first time. Provisioning and authentication are critical to security and you're actively harming your customers if you require them to use your own IDP solution in order to use your service.
- datadrivenangel 1y agoAs a volunteer at a volunteer run non-profit, I agree! Nobody makes any more at the org, and it would be great to have SSO for things without having to pay more 150% of our total annual budget to get it...
- simplyinfinity 1y agoI self host a bunch of apps that have SSO as enterprise feature. i want to invite my family/friends into these apps, i don't wanna spend additional 20 000$ for the SSO part, but it be real sweet if i could use it. It would eliminate so much questions like "hey.. what was my login to X?" or "can you reset my password to Y" if i could just use SSO.
- rawfan 1y agoJust use oauth2-proxy with keycloak to put SSO in front of any self-hosted app.
- NewJazz 1y agoWorks if everyone has the same permissions in the app but you might still need a shared login as well. I've done this for e.g. metabase before but it is not the same as a native oidc integration.