21–30 of 37 posts
I don't see why anyone would ever use Google anything for a business critical use. They seem allergic to providing customer support for anything other than advertising.
Well, yes, but lack of support is the best-case scenario; the worst case is their tendency to abandon products entirely and on short warning.
My company has been an Okta customer for several years and I'm responsible for administering it. However I don't have experience with other SSO products, so would be interested to hear what the experience is like on the other side. The key thing for me is SCIM provisioning support, but not just that. There are quite a few apps that don't support SCIM, but Okta has built integrations for them anyway using API keys, et…
* Okta has customer service people. So if there are issues, you can get help.
* SSO is Okta's main business, as opposed to a side hustle competing for attention with a gushing cash machine. That means they'll continue to move it forward.
I work for an Okta competitor, but those are the reasons that come to mind for me.
That said, Google is great for companies up to a certain size and Okta isn't going to be cheap. But at some point you get what you pay for.
I don't see why anyone would ever use Google anything for a business critical use. They seem allergic to providing customer support for anything other than advertising.
But I think I can add my 2 cents on why people who are already using something like Okta, will take into consideration before switching.
- Pricing, is it going to be significantly cheaper for the organisation in the long run?
If not it's not worth disrupting 100s of applications for 1000s of people, and not to mention the overhead of tech ops setting this up for everyone for a few thousand dollars per year.
But if the cost saving is in millions or 100s of thousands of dollars? why not .. i think then they can afford to disrupt the existing flow
- Bandwidth to perform this migration, do we have enough room to do this. Chances are people are already fighting with the existing burning issues.
- Customer support
For an alleged violation on one Google service, all the other services were disabled too.
For an alleged violation from one Google account, all the other accounts of the person were disabled too.
All accounts of a company were disabled because of one employee's alleged misdeeds.
I don't know whether Okta is good but my perception of all Google authentication is, and will always be, negative.
If you already have sysadmin skills what's wrong with self-hosting an IdP like Zitadel or Keycloak?
As just one example - 20 years ago it made sense for many businesses to self-host email
It has not made sense to do that for at least a decade
You want to enforce some more controls when you access to critical things, such as AWS, you can't with Google. It has no granular controls. Otherwise it's much easier. We use JumpCloud though, it's a mix between and more comprhensible.
When talking about controls are you referring to provisioning? What are some examples for missing controls?