Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#1

Post by joelittlejohn » Thu, Sep 15, 2022, 6:43 AM UTC

Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk
support.okta.com

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#2

Post by benjaminjosephw » Thu, Sep 15, 2022, 8:55 AM UTC

So it turns out that when you outsource auth, you also outsource some of the governance on who can access your platform.

Isn't access control a set of patterns rather than a service? When did it stop being a core competency of web applications?

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#3

Post by novolunt » Thu, Sep 15, 2022, 9:19 AM UTC

No post body was provided.

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#4

Post by pelagicAustral » Thu, Sep 15, 2022, 9:39 AM UTC

benjaminjosephw wrote: post #2

So it turns out that when you outsource auth, you also outsource some of the governance on who can access your platform. Isn't access control a set of patterns rather than a service? When did it stop being a core competency of web applications?

I’m curious to know if there are any oss alternatives for similar services.

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#5

Post by wg0 » Thu, Sep 15, 2022, 9:42 AM UTC

pelagicAustral wrote: post #4

benjaminjosephw wrote: post #2

So it turns out that when you outsource auth, you also outsource some of the governance on who can access your platform. Isn't access control a set of patterns rather than a service? When did it stop being a core competency of web applications?

I’m curious to know if there are any oss alternatives for similar services.

Ory, Keycloak, Authelia and bunch of others come to mind if that's exactly what you're looking for.

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#6

Post by nailer » Thu, Sep 15, 2022, 9:45 AM UTC

pelagicAustral wrote: post #4

benjaminjosephw wrote: post #2

So it turns out that when you outsource auth, you also outsource some of the governance on who can access your platform. Isn't access control a set of patterns rather than a service? When did it stop being a core competency of web applications?

I’m curious to know if there are any oss alternatives for similar services.

If you just need oauth2 + openid connect, you can install a library from your Open Source package repository of choice.

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#7

Post by throwaway4good » Thu, Sep 15, 2022, 9:54 AM UTC

Wouldn’t these export control rules also apply to Microsoft AD?

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#8

Post by capableweb » Thu, Sep 15, 2022, 9:55 AM UTC

Wow, and here I thought Okta had split up their service into US and non-US, like many other big companies, but seems they have not, so now just because the US has some arbitrary list of who can be a user, everyone using Okta needs to follow that... Seems like the laws are a bit outdated and haven't really been updated for a global internet, hope we see some changes in that direction.

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#9

Post by myth_drannon » Thu, Sep 15, 2022, 9:57 AM UTC

It's sad that people in occupied regions of Ukraine are punished twice, by Russian government and by US government too.

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#10

Post by trhway » Thu, Sep 15, 2022, 9:59 AM UTC

myth_drannon wrote: post #9

It's sad that people in occupied regions of Ukraine are punished twice, by Russian government and by US government too.

Not for long now. Just look at the large military successes Ukraine has achieved in the last few weeks.