91–100 of 326 posts
There's something about Okta that just scares me. If Okta is ever compromised, so are the thousands of companies that rely on it for IdP. How do companies mitigate this risk? Or do they?
What if AWS was compromised and every DynamoDB instance was accessible?
Okta stock dropped 12% in after hours. I see the acquisition as a positive business decision.
Does anyone else think its a horrible idea to outsource your companies authentication? Where I work we are migrating to Okta, and it blows my mind that anyone thinks it is a good idea.
What do you see to be horrible about it exactly?
Centralized services gonna centralize. Something I've been thinking about recently is that a full web browser is a hard dependency of OAuth2-based systems. That's 20-30 million lines of code even for the simplest systems, even though you're basically just using the browser as a form renderer and a central space to store tokens. I feel like there's room for a simpler protocol designed to operate on HTTP plus a minimal…
They are aware of the issues of the browser centricity of OAuth.
It's definitely not the simpler protocol you describe, but it's one way to look at the future.
I hope this gives rise to another, smaller viable party outside of Amazon, Google, and Microsoft. Perhaps I'm jaded, perhaps hopelessly biased - but I can only see this as a net negative. Okta's open source packages receive a pitiful amount of attention (for example: https://github.com/okta/okta-oidc-js/issues?q=is%3Aissue+is%... ) with forks almost becoming a requirement. Auth0 by contrast has been "on the ball" for…
How will market consolidation lead to a smaller viable alternative?
I hope this gives rise to another, smaller viable party outside of Amazon, Google, and Microsoft. Perhaps I'm jaded, perhaps hopelessly biased - but I can only see this as a net negative. Okta's open source packages receive a pitiful amount of attention (for example: https://github.com/okta/okta-oidc-js/issues?q=is%3Aissue+is%... ) with forks almost becoming a requirement. Auth0 by contrast has been "on the ball" for…
Have you heard of https://fusionauth.io/ ? I'm not a user of the product, but I know some of the folks behind it. Might be time for them to shine here.