GitHub is now free for teams

Re:GitHub is now free for teams by kube-system on Tuesday April 14, 2020 @01:21PM (#22868672)

I know, I just personally find it to be a fragmented and confusing set of standards. And a lot of people say OAuth when they mean OpenID Connect, which doesn't help with the confusion... or they abbreviate OpenID Connect as "OpenID" which also means something else.

I've never had to clarify what someone is actually trying to accomplish when they want "SAML 2.0"

[ Parent | on HN ]

Re:GitHub is now free for teams by tptacek on Tuesday April 14, 2020 @01:29PM (#22868800)

You said "OAuth only does authz and must be combined with other technologies to get authn"; obviously, that's not true, in the sense that you can simply use OIDC --- a dialect of OAuth --- to get both.

Since OIDC is better than SAML, which is probably the scariest security standard on the Internet, I think it's worth being clear to people that OIDC/OAuth is viable.

The SAML authz story, for what it's worth, is pretty shady.

[ Parent | on HN ]

Re:GitHub is now free for teams by kube-system on Tuesday April 14, 2020 @01:41PM (#22868952)

For sure. I never said SAML was any good -- I said I found it to be simpler. :)

[ Parent | on HN ]

Re:GitHub is now free for teams by tptacek on Tuesday April 14, 2020 @01:45PM (#22869002)

For developers, they're both just libraries. As protocols to implement, SAML is drastically harder.

[ Parent | on HN ]