News for hackers. Stuff that matters.
Re:Launch HN: Spinach.io (YC W22) – Better daily standups by gtsteve on Tuesday September 20, 2022 @10:26AM (#32912076)
My company is a small business but we require Okta SSO for every app. What is the reasoning behind SSO being an enterprise feature (aside from the fact that most SaaS apps do that)?

This is a blocker to us using many SaaS products because the enterprise tier is always very expensive. I think TeamRetro got it right with SAML support at the first paid tier, we started with a smaller plan and stepped it up as we grew.

So, perhaps you might consider providing SCIM support at the enterprise tier and SAML support at the business tier? I feel this is a nice compromise between security and administration hassle.

Re:Launch HN: Spinach.io (YC W22) – Better daily standups by deepakprab on Tuesday September 27, 2022 @11:36AM (#32996741)
Great suggestion, SAML SSO should really become commodity and made available to all tiers. Enterprise tiers are clearly dictated RFP/Security Questionnaires, there's no bigger admin hassle than that.
Re:Launch HN: Spinach.io (YC W22) – Better daily standups by talmi on Tuesday September 20, 2022 @10:55AM (#32912507)
The simple reason is that it requires setup on our side. Do you see SSO as a blocker to trying? What we've seen teams do in most cases is use the free tier with email signup and try it out for a bit, once they like it and want to upgrade they contact us to upgrade and set up SSO.
Re:Launch HN: Spinach.io (YC W22) – Better daily standups by deepakprab on Tuesday September 27, 2022 @11:25AM (#32996562)
You could make SSO setup self-served. Happy to help you simplify your SSO implementation so you can make it available across all tiers, open-source on an Apache 2.0 license - https://github.com/boxyhq/jackson
Re:Launch HN: Spinach.io (YC W22) – Better daily standups by gtsteve on Tuesday September 20, 2022 @02:48PM (#32916142)
It's not a blocker to trying but I equate "enterprise" with $expensive so it does certainly put me off, as I'd need to enter into negotiations that I don't really have time for in order to comply with our policies. I also find often when I begin this conversation there is a set price that is inflexible and a minimum spend way in excess of what we need, and I usually end up just looking at another product.

I appreciate you have technical limitations at present but consider adding a SSO administration UI to your backlog - you can certainly set it up so it's all managed in the software. It is a bit more of a technical problem when it goes wrong, so that justifies an increased price tag for the support. I don't expect anything for free but I don't want to have to talk to someone to get it.

Re:Launch HN: Spinach.io (YC W22) – Better daily standups by Terretta on Wednesday September 21, 2022 @07:18AM (#32923458)
> Do you see SSO as a blocker to trying?

Yes, absolutely.

And if you have setup on your side, you're doing it wrong.

There should be two fields for the customer to paste or an auto-config file, and a cert. Even without registering a preconfigured app in the IdP directory, its a no brainer.