5 ms·

Might want to edit the title. This article really isn't about Netflix using GMail. It's about Netflix's use of OneLogin and SAML to manage single sign-on for t

by Cowen 13y ago

Might want to edit the title. This article really isn't about Netflix using GMail. It's about Netflix's use of OneLogin and SAML to manage single sign-on for their corporate cloud apps. That umbrella includes Google Apps like GMail, but it also includes apps like "Dropbox, Docusign, Workday, Safari Books, SD Elements, ServiceNow." Single sign-on is a downright essential feature for a lot of B2B cloud apps. Asking corporate users to constantly log in to a loads of different cloud apps is a fast way to make sure that most of those apps don't get used. It's only natural that a service like OneLogin would come around to help companies manage single sign-on.

justizin 13y ago
Disclaimer: I work for OneLogin, but do not speak for OneLogin. :) -- For sure. It's no coincidence that before recently moving to OneLogin from a short-term contract at Gap corporate, my biggest pain at work was getting access to do my job. I think it took a week of onboarding to get on WiFi and in the ticketing system. I worked at Gap for six weeks (everything but the systems are pretty cush). The entire time I had an insecure password set by a network administrator because the password reset form was broken. I had access to my Gap Exchange account for nearly two months after I left - longer than I worked there. Perimeter-based security typically leads to a situation where the people who need to get their job done can't conveniently, but anyone with half a cluestick can waltz in.
rogerbinns 13y ago
In our startup, I do the orientation of new people. I require them to select a password manager before joining, and the first day includes setting up numerous accounts (around 11). It is a right royal pain. A contributory factor are those services that don't understand people have separate personas for work versus personal. Examples that screw it up are Trello, Github and Dropbox. Google are the least worst although they do have sites that get things wrong (eg appengine & analytics).

by Cowen 13y ago

justizin 13y ago

Disclaimer: I work for OneLogin, but do not speak for OneLogin. :) -- For sure. It's no coincidence that before recently moving to OneLogin from a short-term contract at Gap corporate, my biggest pain at work was getting access to do my job. I think it took a week of onboarding to get on WiFi and in the ticketing system. I worked at Gap for six weeks (everything but the systems are pretty cush). The entire time I had an insecure password set by a network administrator because the password reset form was broken. I had access to my Gap Exchange account for nearly two months after I left - longer than I worked there. Perimeter-based security typically leads to a situation where the people who need to get their job done can't conveniently, but anyone with half a cluestick can waltz in.

rogerbinns 13y ago

In our startup, I do the orientation of new people. I require them to select a password manager before joining, and the first day includes setting up numerous accounts (around 11). It is a right royal pain. A contributory factor are those services that don't understand people have separate personas for work versus personal. Examples that screw it up are Trello, Github and Dropbox. Google are the least worst although they do have sites that get things wrong (eg appengine & analytics).