News for hackers. Stuff that matters.
Re:Show HN: No-code alternative to Retool, Appsmith, Interna... by superice on Monday February 14, 2022 @06:12AM (#30330646)
It's just a security measure. As a founder of a currently 4-person company, I want SSO everywhere I possibly can. It reduces attack vectors, and makes it so much easier to ensure nobody has access when they leave the company. Every product we use that doesn't offer SSO has to be added to our onboarding/offboarding checklists.

It comes down to this: Don't assume companies are incompetent at proper dealings around employee access to products they use just because they're small. These things tend to be correlated, but it hurts small companies trying to deal with this correctly.

Edit - Let me phrase it like this: By locking away account management and security tools you're implicitly stating only large enterprises should care about security.

Re:Show HN: No-code alternative to Retool, Appsmith, Interna... by Sahbak on Monday February 14, 2022 @08:55AM (#30332010)
Don't expect this to change. Most companies realize they can't provide any value for enterprises in that price tier, so they lock SSO behind the most expensive tier. Drives me mad but that's the industry.
Re:Show HN: No-code alternative to Retool, Appsmith, Interna... by atonse on Monday February 14, 2022 @09:53AM (#30332666)
Yes, and I find it absolutely ridiculous.

But I have found a couple companies that do a sort of "middle-ground" – SSO via SAML2 locked behind some "call us" enterprise BS, but Google Auth available to all.

MailGun does this, and so does Linear. Atlassian charges extra for SSO (via Atlassian Access) but it's just $30 a month or something, so seems totally reasonable even if extra.

This feels like a decent middle ground for smaller companies since it requires zero extra config.

Re:Show HN: No-code alternative to Retool, Appsmith, Interna... by antonsv on Monday February 14, 2022 @11:41AM (#30334113)
We have Google Auth available in all plans as well btw