andy89

6 ms·

1.
Show HN: Free SoC 2 readiness checker – built after spending $15k on consultant
3 points by andy89 9mo ago|0 comments
2.
by andy89 11mo ago
For context, here’s the part I was referring to about the “catch them at login” / JIT idea: https://mojoauth.com/blog/how-to-migrate-to-passwordless-fro...
3.
Ask HN: Has anyone phased out Azure B2C without breaking user flows?
1 points by andy89 11mo ago|1 comments
4.
by andy89 1y ago
We recently had to implement SSO for a multi-tenant SaaS platform. The usual names came up (Okta, Auth0, Ping, WorkOS, etc.), but the deeper we looked, the more complicated the tradeoffs became. We created a comparison table across 15 SSO p
5.
by andy89 1y ago
Thank You
6.
Made a CIAM hub – what should we add?(ssojet.com)
1 points by andy89 1y ago|3 comments
7.
by andy89 1y ago
Working on a central CIAM knowledge hub — SSO, SCIM, API security, zero-trust, etc. Noticed most guides out there are too fluffy or scattered. Here's what we’ve got so far: https://ssojet.com/ciam-101 What’s missing?
8.
Guide: Integrating Okta SAML SSO with Next.js (Passport and API Routes)(ssojet.com)
1 points by andy89 1y ago|1 comments
9.
by andy89 1y ago
I recently had to wire up SAML-based SSO with Okta for a Next.js project. Most of the resources I found were either outdated or assumed a ton of boilerplate. I ended up combining passport-saml, iron-session, and custom API routes to make it
10.
by andy89 1y ago
Yeah, totally fair — we’ve run into the same thing. Some vendors list SSO/SAML just to check the "enterprise-ready" box, but it's not actually live or usable. Right now the directory just flags that SSO is publicly claim
11.
by andy89 1y ago
Here’s the directory: https://ssojet.com/b2b-sso-directory/ No signup, just a public list — feel free to send additions if you think something’s missing.
12.
Show HN: Directory of 100 SaaS tools that support enterprise SSO (SAML, SCIM)
3 points by andy89 1y ago|4 comments
13.
by andy89 1y ago
Absolutely — SAML almost always comes up the moment you’re in talks with IT or security teams. It’s a clear signal you're moving upmarket.
14.
When Should a SaaS App Implement SAML Authentication?
1 points by andy89 1y ago|3 comments
15.
Ask HN: Should You Include a Certificate in a SAML AuthnRequest?
5 points by andy89 1y ago|2 comments
16.
We couldn't explain our SoC maturity, so we built a self-assessment tool(soc.tools.ssojet.com)
2 points by andy89 1y ago|1 comments
17.
by andy89 1y ago
We’re a small security team inside a growing SaaS org, and during enterprise sales and audits, we kept getting asked: “How mature is your SOC?” The usual frameworks (NIST CSF, MITRE ATT&CK) are great but heavy — hard to apply without a
18.
by andy89 1y ago
Compiled a detailed JWT security checklist covering everything from signing and expiration to storage, validation, and transmission — structured for use across mobile apps, SPAs, web apps, REST APIs, and microservices. Includes dropdowns fo
19.
by andy89 1y ago
We built a few internal tools to help us deal with SSO and SCIM for our B2B SaaS. Things like testing SSO flows, optional MFA, and email-free onboarding. Now thinking of turning it into a product (ssojet.com). Wondering if others here have
20.
Anyone else struggle with SSO/SCIM as a small SaaS?(ssojet.com)
1 points by andy89 1y ago|1 comments
21.
by andy89 1y ago
Hey HN, Scaling a B2B SaaS product to meet enterprise demands is tough. I've been wrestling with integrating features like robust RBAC and complex subscription models. I've compiled a list of tools to tackle these challenges head-
22.
by andy89 2y ago
Great post on deploying static sites to Azure CDN with GitHub Actions OIDC! For anyone looking to test and debug their OIDC implementations, I highly recommend trying out https://oidc-tester.compile7.org/ . It’s a developer-
23.
How to Implement Okta SAML SSO in Next.js: A Step-by-Step Guide(ssojet.com)
2 points by andy89 2y ago|1 comments
24.
by andy89 2y ago
We recently wrote a detailed guide on integrating Okta SAML SSO with Next.js. This covers everything from setting up Okta to handling SAML assertions in your app using passport-saml and iron-session. Key takeaways: Why Okta + SAML is ideal
25.
Show HN: OIDC Tester – Free, No-Signup Tool for OpenID Connect Testing(oidc-tester.compile7.org)
3 points by andy89 2y ago|0 comments
26.
by andy89 2y ago
Thank you for your interest and feedback! I'm glad to hear that the UI looks good and that you're considering giving the SAML Tester a try. I apologize for the inconvenience with the broken links. We'll look into fixing them
27.
Show HN: SAML Tester – Free, No-Signup Tool for SAML Configuration(saml-tester.compile7.org)
4 points by andy89 2y ago|2 comments
28.
Show HN: SSOJet – Intelligent Enterprise SSO That Just Works(ssojet.com)
2 points by andy89 2y ago|0 comments
29.
Understanding Certificate Revocation Lists (CRLs) in Cybersecurity(blog.ssojet.com)
1 points by andy89 2y ago|0 comments
30.
Mastering SAML Implementation in PHP(blog.ssojet.com)
1 points by andy89 2y ago|0 comments

More ›