The SSO Wall of Shame
sso.tax
The SSO Wall of Shame
1–10 of 44 posts
Re: The SSO Wall of Shame
#2SSO is such a blessing when used inside companies. Who the hell wants to manage acccounts/passwords in every webapp? Absolutely nobody once they get used to SSO.
Re: The SSO Wall of Shame
#3Is there an easy way to get started with SSO on a SAAS app? (Without paying per user on Okta/Auth0)
I'm currently using Firebase which supports sign-in with Microsoft, but not sure if that's technically the same as SSO.
Re: The SSO Wall of Shame
#4Is there an easy way to get started with SSO on a SAAS app? (Without paying per user on Okta/Auth0) I'm currently using Firebase which supports sign-in with Microsoft, but not sure if that's technically the same as SSO.
Are you looking to offer SSO to users of your SAAS app? Firebase does support SAML: https://medium.com/@tfalvo/single-sign-on-sso-for-your-fireb...
Both Microsoft Azure AD and JumpCloud have free plans you can use for testing.
Re: The SSO Wall of Shame
#5I wish there was a hall of fame of vendors who allow SSO for free or a low price. And I don’t mean “Sign-in with Google” - not everyone has company managed Google accounts.
Of the top of my head I can think of Mapbox and AWS where it’s free. Atlassian charges $4/month covering all their products (cheap if you use two or more).
Any more good examples?
Re: The SSO Wall of Shame
#6Is there an easy way to get started with SSO on a SAAS app? (Without paying per user on Okta/Auth0) I'm currently using Firebase which supports sign-in with Microsoft, but not sure if that's technically the same as SSO.
sign-in with Microsoft is indeed SSO.
Re: The SSO Wall of Shame
#7I wish there was a hall of fame of vendors who allow SSO for free or a low price. And I don’t mean “Sign-in with Google” - not everyone has company managed Google accounts. Of the top of my head I can think of Mapbox and AWS where it’s free. Atlassian charges $4/month covering all their products (cheap if you use two or more). Any more good examples?
We recently got Salesforce SSO at work using Microsoft Azure AD.
Re: The SSO Wall of Shame
#8SSO is such a blessing when used inside companies. Who the hell wants to manage acccounts/passwords in every webapp? Absolutely nobody once they get used to SSO.
it's amazing how many companies do not go in for SSO though, because it is often the "extremely expensive" tier.
I used to work for Ubisoft, a 20,000+ person company, and SSO was used for almost nothing because it was considered far too costly.
conversely: I worked for a Tencent owned studio recently and they used SSO for everything, it was amazing, until the Okta breach (and response, which is worse than the breach itself)
Now I'm at a startup, and the sentiment is the same as Ubisoft; better off buying a lastpass subscription than paying for SSO, even though there's many drawbacks to that approach.
Re: The SSO Wall of Shame
#9SSO is such a blessing when used inside companies. Who the hell wants to manage acccounts/passwords in every webapp? Absolutely nobody once they get used to SSO.
it's amazing how many companies do not go in for SSO though, because it is often the "extremely expensive" tier. I used to work for Ubisoft, a 20,000+ person company, and SSO was used for almost nothing because it was considered far too costly. conversely: I worked for a Tencent owned studio recently and they used SSO for everything, it was amazing, until the Okta breach (and response, which is worse than the breach…
Sadly, I find most products hide SSO functionality behind "Enterprise" plans, as if only large organizations have a need for it. Any organization can benefit from SSO, and I don't think it warrants the huge price increase developers think it does.
Re: The SSO Wall of Shame
#10Is there an easy way to get started with SSO on a SAAS app? (Without paying per user on Okta/Auth0) I'm currently using Firebase which supports sign-in with Microsoft, but not sure if that's technically the same as SSO.
sign-in with Microsoft is indeed SSO.
"Sign in with..." is almost SSO. Federated authentication employs centralized authentication and can even support third-party identity providers. However, single sign-on is exactly like it sounds: You sign on once and have access to all SSO-enabled applications. This differs from "sign in with..." offerings, because you often have to sign in again. Compare this to, say, the user hub of Google Workspace: You are presented a list of applications, and when you click on one, you are instantly signed into it. This is SSO.